A hybrid cloud application may have to handle different kinds of data. Some of it may be sensitive and requires special handling. For example, if the user's password has to be handled by the application, it should be handled with care. The following points should be considered while handling sensitive data:

• A password should not be visible on the screen when the user types it. Even if asterisks (*s) are displayed, you must ensure that they cannot be copied and pasted to reveal the password.
• A password or any sensitive data such as credit card information should not be transmitted from one component to another over the network, without being encrypted.
• Sensitive strings should not be passed into queries to the database. The database server may be logging all the queries and the database administrator may be able to fetch these sensitive details by looking at the logs.