I understand that each app runs within its own sandbox.
If that is the case, is it safe to save credentials in a flat file?
Apart from saving it in the database or over the network what are other options in saving credentials in an app?
You can store application credentials in SharedPreferences
in android app instead of store in flat file.