I'm new to the ionic framework and have some basics of it and currently I'm developing a private app for my family only that store some sensitive information in the localstorage. I used some crypto libraries to encrypt the whole data to prevent anyone reading it directly.
The app does not call any external API, links to any external network and website, and it does not connect to any server host since it is just for our own use only.
The question is, is there any vulnerability for anyone to attack my private app and get the data from localstorage? I've read some article saying that localstorage is either attack by physically getting the device or by XSS.