Card details can be stored in the phone and the OS can offer a payments API through which any payment provider can integrate. Similarly to how the File Provider API works.