Good point. Probably best then if we only store the actual game config (a bunch of text files) and completely purge the instance when the user ends the session. Then when booting again we start afresh and copy in the config only.
I built a Tinder-like matchmaking app where users log in with their Facebook account and the app then auto-matches users by their FB likes. I thought taking the hassle out of swiping could give my app an edge over Tinder.
It was working fine for a week or so before Facebook caught up and revoked my API keys (effectively killing the app). They didn't give any reason besides some vague recommendation to review their Terms of Service. A few months later at their F8 developer conference they announced they'll be launching their own matchmaking service which will work pretty the same way I built my app.