I wonder if there's a way to make this non custodial. Ultimately you're still reliant on the service providers full node, but maybe that doesn't have to mean the service provider could run with your money. All that's needed is an application on the phone to generate a private key and sign a message. That signed message might then be sent in ASCII. Interesting to think about.