Security Privacy

English topic guide inspired by the original iOS Developer Notebook, expanded for both iOS and Android teams.

What this topic covers

Core mental models and architecture decisions
Implementation patterns for production apps
Common pitfalls and how to avoid them
Release and QA checklist

Execution checklist

Define one measurable outcome before coding.
Build a minimal feature slice in one screen/flow.
Add unit tests and one integration/UI test.
Validate on small + large devices.

iOS implementation notes

Use native platform APIs first and wrap in thin service layers.
Keep business logic out of views/view controllers.
Adopt structured concurrency and explicit error handling.
Instrument performance and crash metrics before release.

Android implementation notes

Use clear layer boundaries (UI, domain, data).
Prefer immutable UI state and unidirectional data flow.
Handle network/cache failures with explicit fallback states.
Profile startup and rendering performance on mid-range devices.

Code examples

Swift

let query: [String: Any] = [
  kSecClass as String: kSecClassGenericPassword,
  kSecAttrAccount as String: "auth_token",
  kSecValueData as String: Data(token.utf8)
]
SecItemAdd(query as CFDictionary, nil)

Kotlin

val masterKey = MasterKey.Builder(context)
    .setKeyScheme(MasterKey.KeyScheme.AES256_GCM)
    .build()
val prefs = EncryptedSharedPreferences.create(
    context, "secure", masterKey,
    EncryptedSharedPreferences.PrefKeyEncryptionScheme.AES256_SIV,
    EncryptedSharedPreferences.PrefValueEncryptionScheme.AES256_GCM
)

What this topic covers

Execution checklist

iOS implementation notes

Android implementation notes

Code examples

Swift

Kotlin

Reference links

Related topics