PRIVACY, IN PLAIN LANGUAGE

You hold the key.

Health MCP connects Apple Health to an assistant you choose. Health values are encrypted on your iPhone before upload. The service does not receive your decryption key.

Effective September 8, 2026. This page describes the V1 private beta operated by Iddo Gino.

Data on your iPhone

The app reads only the Apple Health types you permit. Optional groups and workout GPS routes start off. The app stores its private keys in this iPhone’s Keychain and keeps a protected sync journal containing sample identifiers, date boundaries, query anchors, and operational history. Health values are read and encrypted in memory.

Apple Health remains the source of truth. Removing a Health MCP account does not delete anything from Apple Health.

Data stored by the service

The service uses Cloudflare Workers, D1, KV, and private R2 storage. It stores encrypted health files and operational metadata: a random account identifier, the device’s public signing key, an optional Apple push token, available series names, first and last dates, total sample counts, file sizes, sync timestamps, and approved client connections.

The catalog is not encrypted. It reveals which kinds of data are available and their broad coverage, but contains no health measurements, daily totals, workout locations, or private key. Network providers also process IP addresses and request information to deliver and secure the service. Operational logs do not intentionally include health values, decryption keys, or file bodies.

Encryption and your key

Each file is compressed and encrypted with AES-256-GCM on the phone. The AES key is derived from your randomly generated private key. New keys contain 130 bits of random entropy plus a typo-detection character. Earlier beta keys contain 80 bits and remain supported; rotating the key generates the stronger format. The cloud stores authenticated ciphertext.

The signed iPhone app includes an exportable local client. Its decryption code stays on your computer; it does not execute code or instructions supplied by the remote MCP service. Use that client or an independently trusted local implementation.

Keep a secure copy of your key. The service cannot recover it. An assistant or execution environment that receives your key and file access can decrypt your data. Its privacy terms and retention practices then apply to information you choose to use there.

Control over sharing

MCP connections require approval in the iPhone app. You can revoke a connection, disable optional series, rotate your private key, or delete your account from Settings. Revocation blocks new requests and future downloads through that connection. It cannot erase data already downloaded by an assistant.

Turning an optional group off removes its encrypted copies from the service. Rotating the key revokes connections, removes the current cache, and starts a new backfill under the new key.

Retention and deletion

The encrypted cache is retained until you remove data, change settings, rotate the key, or delete the account. Account deletion immediately revokes access and removes active encrypted objects, the catalog, device registration, OAuth grants, and connections. An interrupted upload may finish after deletion; inaccessible orphan files are tracked for cleanup after a one-hour settling period. A scheduled sweep retries storage deletion failures. A deletion receipt containing the account identifier and public signing key is retained for 30 days so the phone can safely retry if the deletion response is lost. It contains no health values or private key. Cloudflare’s infrastructure may retain provider-managed backups or logs according to its retention practices. Those copies do not include your private decryption key.

Notifications

When you enable notifications, Apple receives the device push token and a generic request to sync or open the app. Push payloads contain no health values or private key. Delivery is controlled by iOS and is not guaranteed.

No advertising or tracking

Health MCP does not sell health data, show advertising, or include advertising or analytics SDKs. The marketing site does not ask for health data or decryption keys.

Questions and help

See the support page for data controls and connection troubleshooting, or email support@healthmcp.cc for privacy and deletion requests.