I think even something like Drip is not sufficient in this kind of situation. If the police can compel someone to unlock their phone and decrypt data, then being local-only won’t stop them. Of course it’s a lot easier to ensure that no data exists if it’s local-only and something happens that might attract the interest of the police.

Nothing in this comment should be construed as legal advice.