Should I store a purchase locally on my app?

Hi!

The RevenueCat SDK will cache the data locally so you don’t need to worry about storing it locally yourself.

To answer your individual questions:

• Which is the best option regarding the question of risk here (hacking the subscription)?

Assuming the device is not jailbroken, both options are equally secure. Doing it locally through the store APIs would not allow for tampering. For RevenueCat, we use cryptographic signatures to ensure the responses are not tampered with (more details).

• is there an issue with second option if user does not have wifi/connected?

Checking each time with RevenueCat will use a local cache managed by the SDK, so you don’t need to worry if the user doesn’t have any internet connectivity.

• Or possibly do both (but possibly overkill!)

There’s no need since the RevenueCat SDK is effectively doing the local caching you were doing yourself before 😀.