correct users store their own signer keys on their own hardware. your server never touches keys. heck even client javascript on their phone doesn't see it. this is pretty opinionated towards self custody.