Breez, Phoenix(albeit that you cant open to any other node except acinq), electrum and blixt wallet are all LN nodes. mobile ones due to their more limited resources. keys are on the phones. so what youd have to worry about is the os on the phone. graphineOS is probably the most secure and least google data mined phone out there.