Privacy Questions to Ask Before Choosing a Health Tracker
Eight questions worth answering before you type months of health information into any app.
Educational information based on the cited authoritative sources below. Not individually reviewed by a medical professional, and not medical advice. See our editorial standards.
The short answer
Ask how the company makes money, whether personal health data is sold or licensed, who else processes it, how long it is kept, whether you can export it, what analytics are used, whether any of it is used for AI, and where it is stored. Prefer specific, checkable statements — named subprocessors, stated retention periods and a working deletion route — over absolute claims.
Start with the business model
How a company makes money tells you most of what you need to know. Subscriptions, advertising, data licensing and research partnerships create different incentives. If the answer is not stated plainly anywhere, that is itself an answer.
The questions
- How does the company make money? Look for a direct statement, not an implication.
- Is personal health data sold or licensed? “We respect your privacy” is not a commitment; a specific sentence is.
- Who else processes the data? A good privacy policy names its subprocessors — hosting, analytics, payments, email.
- How long is data kept, and what happens if I delete my account? Look for stated retention periods rather than “as long as necessary”.
- Can I export my own data? If you cannot get it out, you cannot leave without losing it.
- What analytics are used, and are they tied to me? Cookieless, aggregate analytics are very different from advertising trackers.
- Is any of it used for AI, and on what basis? This should be disclosed rather than buried.
- Where is the data stored, and under whose laws? Relevant if jurisdiction matters to you.
How to read the answers
Prefer specific, checkable statements over absolutes. “We never store anything” is rarely true of an app that shows you your own history. Named subprocessors, stated retention periods and a working deletion route are more meaningful than strong adjectives.
Where HarmoFlux stands
HarmoFlux has no advertising business and does not sell personal health data. Subprocessors are named and retention periods stated in the privacy policy, data can be exported, and an account can be deleted. Those claims are written down so you can check them rather than take them on trust.
Where to track this in HarmoFlux
HarmoFlux records what you log and organizes it into a summary you can bring to an appointment. It does not diagnose and does not establish that anything caused a symptom.
Sources
How HarmoFlux can help
HarmoFlux names its subprocessors, states retention periods, sells no personal health data, and supports export and account deletion.
HarmoFlux helps you record and organize this information. It does not diagnose conditions, recommend treatment, or replace care from a qualified healthcare professional.
