Assume you'll be covering Android also? Have you been through the OWASP 2016 mobile top 10 yet? If not, it's probably worth checking out. For any diagramming I've been using https://draw.io/
probably a good idea to use the same so our diagrams follow a theme. It's gotten better recently, is quite versatile and free.