Privacy and Security
Health data is deeply personal. We recognize the responsibility that comes with collecting and managing it.
Using Apple’s CloudKit, our entire platform is built around privacy by design, meaning your data is protected by the architecture itself, not just a policy.
We strive to operate with transparency, accountability, and respect for the individuals who make this research possible.
-
CloudKit is Apple's cloud service framework that lets apps securely store and synchronize data using Apple's iCloud infrastructure.
-
We use CloudKit’s tiered architecture to keep your information secure in the appropriate databases.
Private Database
Personal profile
Contact information
Consent
Research Database (our backend)
De-identified study data
Digital biomarkers
Survey responses
Public CloudKit Database
Study catalog
Educational materials
Citizen science results
-
Apple requires every participant to explicitly choose what information they want to share. Access is granted on a data type by data type basis, meaning you can decide exactly which categories of information are available to the study. You can also revoke access at any time through your device settings. Apple does not allow apps to access health data without user permission.
-
Before research data is used for analysis, direct identifiers are removed whenever possible. This may include information such as names, contact information, medical record numbers, and other identifying details.
Research records are assigned unique study identifiers so that researchers can analyze health trends without needing access to personal identity information.
Our goal is to maximize scientific value while minimizing privacy risk.
-
When information is sent between your device and Apple’s servers, it is encrypted using secure network protocols. Data stored in CloudKit is also encrypted on Apple’s infrastructure.
-
Participation is voluntary.
You can:
Choose what data to share
Review consent materials before participating
Withdraw from studies when permitted by study protocols
Revoke future access to health data through your device settings
We believe participants should remain active partners in the research process, not simply sources of data.