So many apps use sqlite or json files for storage without encryption; this doesn't seem like much of a discovery.

In any case, don't share PII or any of your deepest, darkest secrets with it.