Are you limited to mobile devices that's why you're inclined to use Mycelium?
Do you have access to a PC?
Yes I have also a PC. I use mycelium because its the only one I tried so far..
Generally, it's safe even in Android as long as the device itself isn't compromised and the wallet isn't malicious.
If you can risk the amount and you're confident with your Android phone's security, do it.
But if you're dealing with huge amounts, it's best to proceed with caution.
If you're interested in Electrum cold storage, you can use your PC as "
temporary" air-gap PC until you fully spent its funds.
Disconnect the PC's internet communication devices like WiFi, Bluetooth, LAN cables, etc.
And use your android phone as the online "
watching only" wallet.
Download PC and Android Electrum from
electrum.org/#download.
Transfer the files to the specific devices to install (
recommended: verify their signature)
Setting the wallets is easy, in the offline PC Electrum, create a new imported wallet by selecting the option: "
Import bitcoin addresses or private keys"
And type the private key there (
you have to append the script type described in "?" if the address isn't legacy '1 address').
In the online Android Electrum, create a new wallet and select the same option but paste the address instead so it will be created as a 'watching only' wallet.
The balance should appear in the online watching only wallet.
With that you've created a cold-storage setup.
To spend it, create a transaction on the online Android Electrum, find a way to transfer the PSBT file to the offline PC (
e.g. Flash drive or QR Code);
sign it using the offline PC, transfer the signed raw transaction back to the online Electrum and "
broadcast" it.
Read these for the details, you can skip to the "
create txn" part (
the buttons are different due to the difference in versions):
After spending the funds completely (
e.g.: sent to a hardware wallet/exchange) with 6 confirmations or more,
you can now use the offline PC normally since the private key there is now empty.
That was not totally cold-storage setup but it's a lot better than exposing the private key online.