Privacy

What makes a peptide tracker private.

Vialist Log is a local-first iPhone app for tracking peptide, GLP-1 and TRT injections, with no account and no server. This page explains what those words mean, what Apple's "Data Not Collected" label does and does not tell you, and how to check any app's label yourself before you enter a single dose.

Vialist records and converts the numbers you enter. It does not recommend a dose, and it is not medical advice. Use the dose your prescriber or provider gave you.

What "no account" means

An account is a sign-in: an email address and a password, or a Sign in with Apple or Google button. Apps that have one usually keep your entries on the company's servers, so they can follow you to a new phone. That is convenient. It also means a copy of your health log lives somewhere you do not control, under a policy you have to read.

No account means there is nothing to sign in to. Vialist asks for no name and no email, anywhere in the app. It also means there is no Vialist server for your log to be stored on. Those are two separate facts, and it is worth checking both in any app, because an app can skip the sign-up screen and still send your entries to a server.

What "local-first" means

Local-first means the copy of your log that the app works from is on your phone. It opens, calculates and reminds you with no signal, because it does not need to ask a server anything. A copy leaves the phone only when you start an action such as an export or a share.

That is how Vialist Log works. The log sits in a database in the app's own storage. The app makes no network requests of its own: purchases go through Apple's StoreKit, and links you tap, such as cited sources, open in Safari. The app's folder is also left out of iCloud and computer backups, which is part of the trade-off covered below.

What Apple's "Data Not Collected" label means

Every App Store listing has an App Privacy section, often called the privacy label. The developer fills it in, and Apple displays it with a note that the information has not been verified by Apple. A label is a statement the developer has made, not a certificate.

The label sorts the data an app handles under four headings. "Data Not Collected" is the one for an app whose developer says it does not collect any data from the app. Apple defines the other terms on its Privacy Definitions and Examples page, including what counts as linked to your identity and what counts as tracking.

Vialist Log is in TestFlight beta and awaiting its App Store release, so it has no public listing to open yet. The App Privacy label submitted to Apple for it reads "Data Not Collected". The privacy policy describes what the app stores and the only ways data can leave the phone, and the label is completed from the same review.

How to check any app's label yourself

You do not need to install the app or open Settings. The label is on the app's page, before you download.

  1. Open the app's page in the App Store. Search for it, or open its apps.apple.com link in a browser.
  2. Scroll past the screenshots, description and reviews to the section called App Privacy.
  3. Open the full list with See Details if the page shows that button.
  4. Read the headings and the categories under each one. The next section explains what to look for, and the privacy label comparison shows how the labels of popular trackers read today.
  5. Open the developer's privacy policy, linked from the same page, and check that it says the same thing as the label.
  6. Look again after big updates. A developer can change the label with a new version, and Apple notes that privacy practices may vary with the features you use or your age.

What to look for

  • Data Used to Track You. The page says this data may be used to track you across apps and websites owned by other companies. In Apple's definitions, tracking means data about you or your device is linked with third-party data for targeted advertising or advertising measurement, or shared with a data broker.
  • Data Linked to You. The page says this data may be collected and linked to your identity. Categories such as Contact Info or Identifiers often go with an account or a sign-in.
  • Data Not Linked to You. The page says this data may be collected but is not linked to your identity. It is still collected, so read the categories.
  • Health & Fitness. This category appears when the developer says the app handles health or fitness data. Check which heading it sits under. Health & Fitness under Data Linked to You is a different statement from the same category under Data Not Linked to You.
  • Data Not Collected. The developer says it does not collect any data from the app. Nothing else is listed under it.

A label does not describe how data is protected, and it does not cover what a developer's website does. Treat it as one input and read the policy too.

How Vialist Log handles backups, reminders and Health

Backups are files you keep

Vialist has no cloud copy, so a backup is a file you make. Settings can export your data as JSON or CSV and hand it to the iOS share sheet. It goes only where you pick: Files, iCloud Drive, AirDrop, or an email you send yourself. By default a JSON backup asks you to set a password of at least 10 letters, digits or spaces, and is encrypted with AES-256-GCM. A forgotten password cannot be recovered by anyone, and CSV exports are not encrypted.

Reminders are local

Reminders are local notifications scheduled on your phone. Vialist has no server and never registers for push notifications, so nothing is sent to deliver them. An optional discreet setting makes notifications say only "Reminder", never a compound or protocol name.

Apple Health is read only

Apple Health is optional and off by default. Vialist asks iOS for access only when you tap Connect in Settings, and you choose which types to read. In this version it only reads and never writes to Health, and what it reads stays on your phone. It leaves only through a share action you start, such as a backup or a doctor report, and only if you include it.

Nothing else is sent

The app contains no analytics, crash-reporting, advertising or cloud-sync SDK. This website is separate from the app: it sets no cookies and counts visits with Cloudflare Web Analytics, which does not use cookies. The privacy policy has the full detail.

What no account costs you

No server is a trade-off. There is no sync between devices, so the log lives on one iPhone. The app's folder is left out of iCloud and computer backups, so if you lose or reset the phone, the log goes with it unless you saved a backup file. Vialist is iPhone only for now, and Android is planned. If sync across devices matters more to you than keeping the log off a server, an app with accounts may suit you better.

Questions

Is a tracker with no account really private?

No account removes one common link between your log and your identity, but privacy depends on more than the sign-in screen. Check where the data is stored, whether the app sends it anywhere, and what the App Privacy label and the privacy policy say. For Vialist Log the log is on your iPhone, and nothing goes to a Vialist server because there is none.

Does "Data Not Collected" mean an app is approved or safe?

No. It is the developer's own statement about data collection, shown by Apple with a note that Apple has not verified it. It says nothing about whether an app's math or medical content is correct. Read the label, then the privacy policy.

Where is my log stored in Vialist Log?

On your iPhone, in the app's own storage, and nowhere else. There is no account, no cloud database and no sync. Backups are files you create and keep yourself, for example in Files or iCloud Drive.

What happens if I lose my phone?

Without a backup file the log is gone, because there is no copy on a server. Export a JSON backup from Settings now and then and keep it somewhere you control. If you set a backup password, keep that too, because it cannot be recovered.

Does Vialist Log read my Apple Health data?

Only if you turn it on. Apple Health access is optional, off by default and read only, and you choose the types. What it reads is used on the phone and is never uploaded.

Does Vialist tell me what dose to take?

No. You enter the dose you and your provider decided on. Vialist does the unit math and keeps the record.

Vialist Log keeps it on your phone

Vialist Log is a local-first iPhone app for tracking peptide, GLP-1 and TRT injections. It keeps your data on your phone, with no account and no server.

Join the beta on TestFlight