The Privacy Policy is the binding document. This page is the plain-language version of the part of it that matters most: what happens to your health data.
Landmark reads. It does not write.
Landmark asks Apple Health for read permission only. It never writes a value into Apple Health, so it can never change, overwrite, or add to the record your other apps and devices keep there.
What it reads, and why
| Category | Examples | What Landmark does with it |
|---|---|---|
| Activity | Steps, distance, active energy, exercise minutes | Measures progress against the activity inputs you configured |
| Workouts | Type, duration, energy | Counts sessions toward strength and cardio targets |
| Sleep | Time asleep, the time you fell asleep | Measures sleep inputs, and relates sleep to the next day's behavior |
| Nutrition | Energy, protein, water | Measures nutrition inputs, including ceiling-shaped ones like a calorie limit |
| Alcohol | Number of drinks | Measures a drinks limit, if you set one |
| Body | Weight, body fat, lean mass | Tracks the outcomes your goals point at, never as a daily task |
| Vitals | Resting heart rate, HRV, VO₂ max, systolic blood pressure | Evaluates whether your current strategy is working |
| Daylight | Time in daylight | Measures a daylight input |
| Mindfulness | Mindful minutes | Measures a mindfulness input |
Landmark asks for the whole set once, and you decide which parts to grant. It works with whatever you allow. Granting less means fewer inputs it can track automatically, not a broken app.
Where it goes
Nowhere.
Data read from Apple Health is written into Landmark's own database on your iPhone and stays there. There is no Landmark account, no sign-in, and no server that receives it. Landmark does not use iCloud, so it stores no health data there either. The correlations Landmark shows you are computed on your device, from your local data.
Background updates
Landmark uses Apple Health's background delivery so that progress is current when you open the app, so a workout you finished an hour ago is already counted. This is a local mechanism between your device and Apple Health. Nothing leaves the phone as a result of it.
Taking it back
To stop Landmark reading anything further: open the Health app, then Sharing → Apps → Landmark, and turn off whichever categories you want. You can also reach it from Settings → Health → Data Access & Devices.
To delete everything Landmark has: delete the app. Its database goes with it. Because the data was never sent anywhere, deleting the app is the whole of the deletion.
Revoking permission stops new reads but does not remove what Landmark has already read. Deleting the app does that.
Apple Health's own privacy rules
Apple requires that health data read through HealthKit is not used for advertising or sold to data brokers, and that apps ask permission for each type. We follow those rules. They are also, independently, what we would do.
Questions
Get in touch via our support page.