For input fields expected to accept sensitive information, use input types such as "textNoSuggestions" (or "textPassword" for a password) to ensure the input does not get stored in the keyboard cache.
The input type can also be set in code through TextView.setInputType() rather than declared through XML.
Optionally, instead of declaring an input type through XML, you can set the input type in your code using TextView.setInputType().