Erm, who made this and why should I trust it? Wallet apps need a lot of trust behind them, more than a normal app. It could be really well made and still run off with my money if they're malicious or just implemented the crypto wrong.
The general principle applies but just in case anyone's confused, Cipher's wallet is a client running on the phone, and Parity's wallet was a smart contract running on the blockchain. It's a bit unfortunate that the term got reused for multisig contracts.
If that's really what I wanted, there are many much easier ways than making a full app, such as writing a lame whitepaper and doing a scam ICO. You will see a lot of open-source code from Cipher soon, hopefully that puts your mind at ease.
This is just a trusted RPC connection right? You're not embedding any sort of light (or otherwise) client? Are you running the nodes on the backend, as opposed to outsourcing to someone like infura? What are you running if so (geth, parity, something else) and how (single node or multiple nodes load-balanced)? Curious to hear the setup.
The app uses Infura, just like MetaMask, but future version will allow you to specify your own RPC. Geth/Parity light clients are not quite usable on mobile yet, but they are improving rapidly, so hopefully in the future.