This relatively old webpage[1] talks about the possibility of side channel attacks in javascript(among other things).I believe this applies to Phonegap.

[1]https://hellais.wordpress.com/2011/12/27/how-to-improve-java...