This is probably the best possible way to do custody. Temporarily until the user’s app comes online. Would be surprised if there would be legal concerns around this approach.