diff --git a/orch8-storage/src/postgres/mobile_sync.rs b/orch8-storage/src/postgres/mobile_sync.rs
index 31b48e8..ec19d70 100644
--- a/orch8-storage/src/postgres/mobile_sync.rs
+++ b/orch8-storage/src/postgres/mobile_sync.rs
@@ -571,20 +571,18 @@ impl crate::MobileSyncStore for PostgresStorage {
         if command_ids.is_empty() {
             return Ok(0);
         }
-        let placeholders: Vec<String> = command_ids
-            .iter()
-            .enumerate()
-            .map(|(i, _)| format!("${}", i + 2))
-            .collect();
-        let sql = format!(
-            "UPDATE mobile_commands SET acked_at = now() WHERE device_id = $1 AND id IN ({})",
-            placeholders.join(",")
+        let mut qb = sqlx::QueryBuilder::new(
+            "UPDATE mobile_commands SET acked_at = now() WHERE device_id = ",
         );
-        let mut query = sqlx::query(&sql).bind(device_id);
+        qb.push_bind(device_id);
+        qb.push(" AND id IN (");
+        let mut separated = qb.separated(", ");
         for id in command_ids {
-            query = query.bind(id);
+            separated.push_bind(id);
         }
-        let result = query
+        separated.push_unseparated(")");
+        let result = qb
+            .build()
             .execute(&self.pool)
             .await
             .map_err(|e| StorageError::Query(e.to_string()))?;
diff --git a/orch8-storage/src/sqlite/mod.rs b/orch8-storage/src/sqlite/mod.rs
index a3cb32a..8d72538 100644
--- a/orch8-storage/src/sqlite/mod.rs
+++ b/orch8-storage/src/sqlite/mod.rs
@@ -2673,16 +2673,18 @@ impl crate::MobileSyncStore for SqliteStorage {
         if command_ids.is_empty() {
             return Ok(0);
         }
-        let placeholders: Vec<&str> = command_ids.iter().map(|_| "?").collect();
-        let sql = format!(
-            "UPDATE mobile_commands SET acked_at = datetime('now') WHERE device_id = ? AND id IN ({})",
-            placeholders.join(",")
+        let mut qb: sqlx::QueryBuilder<'_, sqlx::Sqlite> = sqlx::QueryBuilder::new(
+            "UPDATE mobile_commands SET acked_at = datetime('now') WHERE device_id = ",
         );
-        let mut query = sqlx::query(&sql).bind(device_id);
+        qb.push_bind(device_id);
+        qb.push(" AND id IN (");
+        let mut separated = qb.separated(", ");
         for id in command_ids {
-            query = query.bind(id);
+            separated.push_bind(id);
         }
-        let result = query
+        separated.push_unseparated(")");
+        let result = qb
+            .build()
             .execute(&self.pool)
             .await
             .map_err(|e| StorageError::Query(e.to_string()))?;