We have the same issue in my company's application. For now, we do not cache sensitive data and our app has no offline capabilities.
Actually, security is not the major issue in our case. You can properly encrypt the cached data and that should be sufficient (as long as the app cannot be reverse engineered to obtain the decryption key(s)). However, * enterprise*/corporate data on *personal *(non corporate) devices may raise a lot of legal issues (e.g. can personal devices be subpoena-ed or not...). -- You received this message because you are subscribed to the Google Groups "Android Developers" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/android-developers?hl=en

