Hmm that shouldn't be happening. In ideal world you will have app for signing and that app would be the only one to store you privkey.