My phone was hacked the other day (posted in off-topic.)  I didn't investigate it in detail...just wiped the phone and moved on.  I would have a lot of trouble trusting the phone for anything at this point.  Certainly not a bitcoin client or access to any on-line wallet with more than a few dollars worth of value.  I now don't use it for e-mail on my main e-mail account.  Just set up a secondary e-mail for very limited data and use which is a drag (vs. being able to check my mail e-mail from my phone.)  I guess I'll do the same with on-line wallets which should be easy enough.  I have a Windows machine but would prefer to not access any wallet with more than a few BTC from it as well so this will kill several birds with one stone.