How do you protect data at rest in a MAUI app?

Keep secrets in SecureStorage (keystore-backed). For databases, use SQLCipher (via sqlite-net's encryption support) to encrypt the file, storing the key in SecureStorage. Avoid logging sensitive data, and prefer platform biometric gating for access. Never hardcode keys in the app package.

// Encrypted SQLite connection string (SQLCipher)
var options = new SQLiteConnectionString(dbPath, true,
    key: await SecureStorage.Default.GetAsync("db_key"));
var db = new SQLiteAsyncConnection(options);