I have an internal php web app that runs in browser and is simply a sort of todo/meeting notes recorder(the data may be used by different apps).
The app uses an background autosave feature (js/ajax/php), but that obviously works only with internet connection. Moreover I found myself in situation when my battery drained sooner than I could reach signal or a power socket. Then all data was lost :(
I am considering switching the backup feature to js/localStorage and check periodically for server availability and save online then(erase localStorage). I was googling for other options and only Google Filesystem API shows as an alternative, albeit probably being phased out?
My question is - since the data may contain sensitive information, would you consider storing the data using localStorage "safe" in regards to user access? The devices the app is used on are password+fingerprint protected, but since different OS and Browser combinations store the localStorage data in various locations, I am worried a different user could perhaps get to that data... (device theft/loss)
Or is encryption the only way?
thank you for your ideas.
Alexander