Hi Tim,
Thanks for the response.
That was my impression. Like i said i am completely new to the security aspect.
I am using https on all my web calls out from the app. And the strings that are "hard coded" are generic and 'useless' to a hacker as they are generic strings that can be found online.
So i guess having the user populate their own strings is the safest method, and since my app also does not store the strings after the app is closed.
That was my approach to security for my app.
Thanks!