Security using Profile to store attributes | Community
Skip to main content
January 20, 2021
Solved

Security using Profile to store attributes

  • January 20, 2021
  • 1 reply
  • 1348 views

I'm working with an app dev team who are capturing a preference flag called OptIn that is being pushing to Adobe Campaign Standard via collectPii.

The developers want to be able to retrieve this flag so they can show the current status on a preference screen in app.

I believe that they need to store locally on the device to do this. I pointed them towards using Profile to store this attribute locally and they have asked how data stored in the local Profile is kept secure?

I can't find any detail in the document? Are these data encrypted?

 

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by JiabinGe

@jaelliott 

Is this OptIn the privacy staus set to SDK or it is just some custom attribute owned by the app?

If it is the former, they can use https://aep-sdks.gitbook.io/docs/resources/privacy-and-gdpr#set-and-get-privacy-status this API to retrieve the privacy status.

For later, they need to use an encrypted data store to store the value on their own. SDK today does not support store/retrieve encrypted data.

 

- Jiabin

1 reply

JiabinGeAdobe EmployeeAccepted solution
Adobe Employee
January 25, 2021

@jaelliott 

Is this OptIn the privacy staus set to SDK or it is just some custom attribute owned by the app?

If it is the former, they can use https://aep-sdks.gitbook.io/docs/resources/privacy-and-gdpr#set-and-get-privacy-status this API to retrieve the privacy status.

For later, they need to use an encrypted data store to store the value on their own. SDK today does not support store/retrieve encrypted data.

 

- Jiabin

JAElliottAuthor
January 27, 2021
Your last paragraph was the answer I was looking for thank you. It's for beyond standard privacy and into (equally standard) permissions. I was hoping the Profile attributes store available within the Mobile SDK would have encryption. https://aep-sdks.gitbook.io/docs/using-mobile-extensions/profile