The Privacy Policy is the binding document. This page is the plain-language version of the part of it that matters most: what happens to your health data.
Landmark reads. It does not write.
Landmark asks Apple Health for read permission only. It never writes a value into Apple Health, so it can never change, overwrite, or add to the record your other apps and devices keep there.
What it reads, and why
| Category | Examples | What Landmark does with it |
|---|---|---|
| Activity | Steps, distance walked, run, cycled, swum and wheeled, flights climbed, active and resting energy, exercise minutes, stand hours and minutes | Measures progress against the activity inputs you configured |
| Workouts | Type, duration, energy | Counts sessions toward strength and cardio targets |
| Sleep | Time asleep, the time you fell asleep | Measures sleep inputs, and relates sleep to the next day's behavior |
| Nutrition | Energy, protein, carbohydrates, fat, fiber, sugar, cholesterol, water, caffeine, and the vitamins and minerals Apple Health records | Measures nutrition inputs, including ceiling-shaped ones like a calorie limit |
| Alcohol | Number of drinks | Measures a drinks limit, if you set one |
| Body | Weight, body fat, lean mass | Tracks the outcomes your goals point at, never as a daily task |
| Heart | Heart rate, resting heart rate, HRV, VO₂ max, blood pressure | Evaluates whether your current strategy is working, and places a heart rate into a zone |
| Daylight | Time in daylight | Measures a daylight input |
| Mindfulness | Mindful minutes | Measures a mindfulness input |
| Date of birth | Your date of birth | Works out your age, which is what turns a heart rate into a heart rate zone. Read only while a heart rate zone goal is available, used for that one calculation, and stored nowhere |
Date of birth is the one item on that sheet that is not a measurement. Apple Health calls it a characteristic: a fact about you rather than something recorded over time. It appears on the permission sheet as Date of Birth.
Landmark asks for the whole set once, and you decide which parts to grant. It works with whatever you allow. Granting less means fewer inputs it can track automatically, not a broken app.
What it does not ask for
Blood glucose, blood oxygen, respiratory rate, body temperature, heart rhythm, hearing, walking and running mechanics, cycling power and cadence, UV exposure, and State of Mind are all absent from the request. Landmark has no feature that reads them, so it does not ask.
Where it goes
Nowhere.
Data read from Apple Health is written into Landmark's own database on your iPhone and stays there. There is no Landmark account, no sign-in, and no server that receives it. Landmark does not use iCloud, so it stores no health data there either. The correlations Landmark shows you are computed on your device, from your local data.
Background updates
Landmark uses Apple Health's background delivery so that progress is current when you open the app, so a workout you finished an hour ago is already counted. This is a local mechanism between your device and Apple Health. Nothing leaves the phone as a result of it.
Reminders are written on your phone
If you turn reminders on, what one says is composed on your device from the data already there: a goal's name, how much of it is left, and the time. Some are timed from your own history, such as the hour you usually finish a habit. They are local notifications, so iOS schedules and delivers them without a server. No health data leaves the phone to produce one, and we never see that one was sent. Reminders are off until you turn them on.
The sunset countdown uses your approximate location
A daylight goal can show how long you have until sunset, and sunset depends on where you are. If you turn the countdown on, Landmark asks iOS for your approximate location and takes the first answer. It is city-level rather than precise, and the app rounds it further, to about 10 km, before keeping it on your iPhone so a later launch still knows the sun times. It is never sent anywhere. The Privacy Policy has the full detail. Declining costs you the countdown and nothing else.
Taking it back
To stop Landmark reading anything further: open the Health app, then Sharing → Apps → Landmark, and turn off whichever categories you want. You can also reach it from Settings → Health → Data Access & Devices.
To delete everything Landmark has: delete the app. Its database goes with it. Because the data was never sent anywhere, deleting the app is the whole of the deletion.
Revoking permission stops new reads but does not remove what Landmark has already read. Deleting the app does that.
To stop the other two permissions: turn reminders off inside Landmark, or revoke them in Settings → Notifications → Landmark. Turn off location in Settings → Privacy & Security → Location Services → Landmark.
Apple Health's own privacy rules
Apple requires that health data read through HealthKit is not used for advertising or sold to data brokers, and that apps ask permission for each type. We follow those rules. They are also, independently, what we would do.
Questions
Get in touch via our support page.