Is a symptom tracker app private? How can you tell?

Why is a symptom record so sensitive?

Because it is a long, dated account of your health, in your own words, often with locations on your body and photographs. It can reveal conditions, medications, cycles and moods. In the EU this is “data concerning health”, a special category under Article 9 of the GDPR, which may only be processed under narrow conditions such as explicit consent (GDPR, Article 9). In the United States, by contrast, an app you download yourself usually sits outside HIPAA altogether; what applies instead is the app’s own policy, consumer-protection law and rules like the FTC’s Health Breach Notification Rule, which the FTC has made clear covers health apps (FTC).

The practical consequence: the protection you get is mostly the protection the app’s architecture gives you.

What are the five checks?

Ten minutes with the App Store page and the privacy policy answers all five.

What do the App Store privacy labels mean?

Every app lists the data it collects in three groups: Data Used to Track You (shared with data brokers or across apps for advertising), Data Linked to You (tied to your identity) and Data Not Linked to You. For a health app, anything under the first group is a hard no. Health & Fitness data under the second deserves a close read of the policy. The honest best case is a label that lists nothing at all, which Apple shows as “Data Not Collected” and which is only possible when the app genuinely has no server for your data.

What does “we take your privacy seriously” actually tell you?

Nothing. Look instead for sentences with nouns in them: stored on your device, we do not operate a server, no analytics SDK, end-to-end encrypted so that we cannot read it. A policy that names each outside service the app contacts, and says what each receives, is written by someone who knows the answer. Independent reviews such as Mozilla’s Privacy Not Included are useful for seeing how the category as a whole behaves (Mozilla Foundation).

What about backups and sync?

A backup is a copy, so ask where the copy lives and who holds the key. A backup file in your own iCloud Drive, encrypted with a key that stays on your device, is under your control. A “cloud sync” run by the app’s company is a server by another name, unless it is end-to-end encrypted. The test is simple: could the company read it if they wanted to? If the policy does not say no in plain words, assume yes.

How is Longnote built?

Longnote has no account and no server. Your record lives on your iPhone. Backups are encrypted with a passcode kept in your device’s keychain, then saved to your own iCloud Drive or to Files, and never include Apple Health entries. The app does send usage statistics to TelemetryDeck (which screens and features are used, the app version and device type, and the purchase when you buy Pro), under an installation identifier with no name attached; they never include your entries, tracker names, notes, photos, body locations or anything from Apple Health. The features that talk to Apple (encrypted backups to your iCloud Drive, weather for a region you type in, map tiles and an app icon for a workout route, saving symptoms to Apple Health) are each named in the privacy policy with exactly what they send, and each has its own switch. This website follows the same rule: no cookies, no analytics, no third-party requests.