Security using Profile to store attributes

[JAElliott]

I'm working with an app dev team who are capturing a preference flag called OptIn that is being pushing to Adobe Campaign Standard via collectPii.

The developers want to be able to retrieve this flag so they can show the current status on a preference screen in app.

I believe that they need to store locally on the device to do this. I pointed them towards using Profile to store this attribute locally and they have asked how data stored in the local Profile is kept secure?

I can't find any detail in the document? Are these data encrypted?

[shalehaha · Accepted solution]

@JAElliott 

Is this OptIn the privacy staus set to SDK or it is just some custom attribute owned by the app?

If it is the former, they can use https://aep-sdks.gitbook.io/docs/resources/privacy-and-gdpr#set-and-get-privacy-status this API to retrieve the privacy status.

For later, they need to use an encrypted data store to store the value on their own. SDK today does not support store/retrieve encrypted data.

- Jiabin

[JAElliott]

Your last paragraph was the answer I was looking for thank you. It's for beyond standard privacy and into (equally standard) permissions. I was hoping the Profile attributes store available within the Mobile SDK would have encryption. https://aep-sdks.gitbook.io/docs/using-mobile-extensions/profile