I am working on the next version of an existing iPad app which has a pincode to lock admin functions. The current version has no means to override the pincode. We followed similar patterns and use cases as the iOS passcode lock feature to set the pincode and like iOS have no means to override the lock.
Is it bad that the lock cannot be overriden? What is best practise for a forgotten pincode in native apps where an email cannot necessarily be sent?
We are currently considering giving an option to remove the lock at the expense of deleting all the data. Users we have spoken generally agree this is a good compromise, but it seems to me to be a little harsh.