If someone gains access to a physical device one should assume the attacker has access to all data that is unencrypted. In my app, the data I am concerned with protecting is