The problem: most health apps trade on your data
If an app is free, your data is often the product. This isn't paranoia — it's a documented pattern with regulator action behind it. In 2023 the U.S. Federal Trade Commission fined GoodRx $1.5 million (February) and BetterHelp $7.8 million (March) for sharing users' health information with advertising platforms like Facebook and Google, contrary to what those apps told their users. Health data privacy is where the enforcement is happening because it's where the sharing is.
A common misunderstanding makes it worse: many people assume HIPAA protects anything health-related. In plain terms, HIPAA mostly covers healthcare providers and insurers — not the consumer apps you download yourself, which is why so much health data flows to advertisers legally. That gap is exactly what a genuinely private app has to close on its own.
It helps to see how the data actually moves. A "free" app carries an advertising or analytics software kit; the moment you use the app, identifiers and events can be sent to the companies behind those kits, which is how a fact you entered privately ends up informing ad targeting elsewhere. The two FTC actions above were about exactly that mechanism, and nothing about it is unique to those two companies — it is the default plumbing of ad-funded software. The point of this page is not alarm but literacy: once you know what to look for, you can check any app yourself, which is what the next section is for.
What “private” should actually mean — a 6-point checklist
You don't have to take any app's word for it. Hold a health tracker — including this one — to these six points, most of which you can verify in its privacy policy:
- No third-party ad trackers in the app or on the site.
- No sale or sharing of your data with data brokers.
- Your data is exportable at any time.
- Full deletion available on request.
- A clear, dated privacy policy you can actually read.
- A business model that is a subscription, not your data.
A couple of these reward a closer look. "No sale or sharing" should extend to sharing for advertising, not just an outright sale — that distinction is where several apps have come unstuck, because "we don't sell your data" can be technically true while data still flows to ad platforms. And a business model that is a subscription rather than your data is the item that makes the rest credible: when you are the paying customer, there is no revenue reason to monetise what you logged, whereas a free app has to earn somewhere.
One honest note: fully local-only apps — where nothing ever leaves your phone — are the strictest option on this list. The trade-off with that approach is the next section.
The trade-off: local-only privacy vs multi-source tracking
Local-only apps deserve credit: a step counter or cycle tracker that keeps everything on-device is about as private as software gets, and for a single purpose that's ideal. But there's a real limit. They can't merge Whoop, Oura, Apple Health and lab results into one picture, or run any server-side structuring, entirely on your phone — the whole point of aggregation is combining sources, and that needs somewhere to combine them.
The honest middle ground is a private server you pay for, with hard export and deletion rights — private and complete, rather than private by staying single-purpose. No page in this SERP frames that trade-off plainly, so here it is: you're choosing between maximum strictness on one metric and privacy across your whole picture. BioTrackr is built for the second.
Put concretely: a local-only sleep app is beautifully private and will never tell you whether last month’s change moved your resting heart rate, because it cannot see your scale or your ring. The instant you want more than one source in one view, the data has to be combined somewhere off the phone — so the real question stops being "local or not" and becomes "if it leaves my device, is the place it lands one I control and can walk away from." That is the standard this page is written to, and the one the next section holds BioTrackr to.
How BioTrackr does private health tracking
Private server, zero trackers
Your account lives on a private server, and the site and app run no third-party ad or analytics trackers — no Google Analytics, no session recorders, no ad pixels (verified by code audit). That's what a privacy-first health tracker should start with. It also means the page you are reading is not quietly reporting your visit to an ad network — the absence is the feature, and it is the same absence throughout the product.
No data resale
BioTrackr is funded by its subscription — $15/month — so the customer is you, not an advertiser. There is no data-broker relationship to be tempted by, because the revenue question is already answered: you pay for the tool, and the tool works for you. That single fact removes the incentive that leads other apps to share what you logged. See pricing.
Export and delete, always
You can export your data whenever you want and request full deletion of your account. Your data is yours to take with you or erase — not something you have to negotiate for. Real ownership means both directions: getting your history out in a usable form if you leave, and having it actually removed if you ask, rather than merely hidden from your own view.
Careful AI processing
When you use an AI feature, only the relevant text or metrics are sent to the AI provider to perform that task; that content isn't used to train models and isn't sold or shared further. In other words the AI sees the slice it needs to do the job and nothing more, and that slice does not become training data for someone else's model. The exact handling is described in our privacy policy, so you can read the specifics rather than take a marketing line for it.
Private tracking without losing the full picture
The payoff is that you don't trade completeness for privacy. You still get around 120 metrics from up to six sources, your labs, your logged protocols, and the before/after verdict — with the whole checklist above intact. That is the whole argument of this page in one line: the usual choice is framed as private-but-limited versus complete-but-leaky, and BioTrackr’s bet is that you shouldn’t have to pick. A private server you pay for is what makes both sides possible at once. Explore the two halves: combine wearable data and does my protocol work. You are not asked to give anything up for the privacy — the full picture and the checklist coexist, which is the entire point of paying for the tool rather than being the product of a free one. If privacy is your main reason for switching from another dashboard, the private Gyroscope alternative page compares them directly.
Frequently asked questions
- Do health apps sell your data?
- Many share it. Regulators have taken action over exactly this — the FTC fined GoodRx $1.5M (Feb 2023) and BetterHelp $7.8M (March 2023) for sharing users’ health data with advertising platforms. The only reliable answer for any given app is to read its current privacy policy and check what it says about sharing and sale.
- Is BioTrackr HIPAA-covered?
- No — and honestly, most consumer health apps are not. HIPAA generally covers healthcare providers and insurers, not a subscription app you sign up for yourself. BioTrackr protects your data through its own practices — a private server, no trackers, no resale, and export or deletion on request — rather than through HIPAA status.
- Can I export my data from BioTrackr?
- Yes. You can export the data you’ve stored in BioTrackr at any time.
- Can I delete everything?
- Yes. You can request full deletion of your account and personal data; we remove it from active systems, keeping only limited records where legally required (such as billing).
- How does BioTrackr make money?
- Subscriptions only — $15/month or $108/year. The customer is you, not an advertiser, which is why there is no incentive to share or sell your data.
Start with a 14-day free trial
One plan, every feature. $15/month or $108/year. No credit card to begin.