Valuable data is protected on an Android device via the SharedPreferences class. Although by default information in SharedPreferences is only available to the corresponding application, it will not stop an attacker who has physical access to the device.

Furthermore, using MODE_WORLD_READABLE opens read access to SharedPreferences for all applications.

References

MEDIUM

Android : Unsafe internal storage (SharedPreferences)

Classification

Overview

References

DerScanner Severity Score

Do you want to fix Android : Unsafe internal storage (SharedPreferences) in your application?

See also

Android : Debug mode on

Android : Error handling: generic exception

Android : HTTP usage