haven't found details on that in the net.
My concern is that I'm using a corporate (bring you own device) phone. We have to install a "security" app running with administrator rights.
IMHO this app can read EVERYTHING what is on the device. I'm pretty sure. Therefore, is the private key of the Mycelium HD wallet encrypted (with the PIN hopefully) when stored the device?