Yes this is a pretty general question but I'm trying to get a feel for the best way to handle an app that touches base w/ a webserver that distributes sensitive data to the app. Any links, general information advice etc.. would be appreciated. 

Since the app would store persistant data retreived from the database for a certain amount of time.. everything becomes somewhat touchy.