GLP-1 tracker apps compared by their App Store privacy labels

Every app on the App Store carries a privacy label, the “App Privacy” section near the bottom of its listing. The label is the one place where a GLP-1 tracker has to put its data practices in the same four headings as every other app, which makes it the fairest side-by-side comparison available without installing anything. Every label below was read from the US App Store on 18 September 2026. Labels change with app updates, so treat each row as true on that date.

What does an App Store privacy label tell you?

A privacy label is the developer’s own answer to Apple’s questionnaire about what the app collects and why. Apple publishes the definitions it asks developers to answer against, and three of them do most of the work:

• Collect means “transmitting data off the device” in a way that lets the developer or its partners read it for longer than it takes to answer the request. Apple adds that data “processed only on device is not ‘collected’”.
• Tracking means linking data about a user or device with other companies’ data for targeted advertising or advertising measurement, or sharing it with a data broker.
• Linked to you means the data is tied to your identity through an account, a device or other details. Apple treats personal data under privacy law as linked.

The label then sorts collected data under up to three headings: Data Used to Track You, Data Linked to You and Data Not Linked to You. An app that answers “no” to collection gets a fourth: Data Not Collected. Third-party code counts too. Apple’s page says the answers must cover what “you or your third-party partners collect”, and it names analytics tools, advertising networks and SDKs as partners.

What the label is not: a security audit. Every one sits under a line on the listing that reads “This information has not been verified by Apple.”

How do twelve trackers’ labels compare?

Here is the summary each listing showed on 18 September 2026. The categories are Apple’s own names; each one can cover several data types.

Two apps declare nothing. Three declare data that is not tied to you. The other seven tie at least some of it to your identity, and three of those seven say some of it is used for tracking.

Which trackers carry a Data Not Collected label?

Peptrend and Peptide Tracker & Calculator, and nothing else in this set. Peptrend is not unique here, and a comparison that claimed otherwise would be wrong on the first row a reader checked.

Peptide Tracker & Calculator’s listing says entries are “stored securely and locally on your device only”. Peptrend’s label follows from how the app is built. It has no account and no sign-in. It has no server of its own, makes no network calls of its own, and ships no analytics SDK. Its privacy manifest declares no collected data types and no tracking. The data lives on the phone, and with iCloud turned on it syncs through your own private CloudKit database. Apple’s CloudKit documentation says “only the user can access their private database, by default”, and that its contents are not visible in the developer portal.

What does “not linked to you” mean for Shotsy and GlucoPal?

It means both declare collecting some data, health data included, without tying it to your identity. Shotsy lists Health & Fitness, User Content, Usage Data and Diagnostics. Its FAQ gives the context. On iOS your data sits on the device and syncs to your private iCloud storage, and Shotsy “may also collect anonymous, aggregated data” for trend analysis, which you can switch off in its Privacy Settings. GlucoPal lists Health & Fitness, Usage Data and Diagnostics, and its listing says no account is required and that data syncs privately through your own iCloud.

Happy Scale, the weight-trend app in the set, declares Purchases, User Content, Identifiers, Usage Data and Diagnostics, all not linked. These three declare some collection, which the top two rows do not, and none of what they declare is tied to your identity.

Which labels list data linked to you, or used to track you?

Seven of the twelve tie some collected data to your identity, and that usually follows from an account. Glapp’s site says your history stays “securely with your account” across iPhone, Android and the web, so a Contact Info and Identifiers entry is what an account-based app would declare. Flat Six’s Peptide Tracker lets you delete your account from inside the app. Cross-platform sync and community features are real reasons to run an account.

Three labels go further and list Data Used to Track You. MeAgain lists identifiers and usage data there. Glowise and Pep AI each list identifiers. Under Apple’s definition that means the data may be linked with other companies’ data for advertising or advertising measurement, or shared with a data broker.

The Sensitive Info category appears on two labels, MeAgain’s and Lilly Health’s, both as data linked to you. Lilly Health is the manufacturer’s own app for its tirzepatide and orforglipron medicines, and its label is the longest in the set.

What a privacy label cannot tell you

A label describes collection. It says nothing about how well the collected data is protected, how long it is kept, or what the privacy policy permits beyond Apple’s headings. It is also self-reported, and an app can change its label with any update.

“Data Not Collected” does not mean the data never leaves the phone either. In Peptrend’s case it can leave by three routes, and only the last two wait for you to act:

• iCloud sync, to your private CloudKit database. It runs on its own whenever the phone is signed into iCloud, and the app has no switch for it. Turning off iCloud for Peptrend in iOS Settings stops the mirroring, and the log stays on the phone.
• Apple Health, which reads your body-mass history and saves the weigh-ins you type into the app back to Health, each direction behind its own permission. Athlete Mode, a version 1.4.0 feature in App Review as this is published, reads ten fitness metrics as well: read-only, kept on the phone, and requested only once you turn it on.
• The JSON export, which goes wherever you share it.

None of those routes passes through anything the developer runs, which is why the label reads the way it does. The dose reminder never leaves the phone at all: it is a local notification, scheduled on the device, with no server behind it. The privacy page says the same thing at more length.

Does the label decide which tracker to use?

Only if privacy is the deciding factor, and even then two apps tie. Peptide Tracker & Calculator is built around peptide inventory, reconstitution and a site-rotation map with rest periods. Peptrend is a GLP-1 and peptide dose log with a free estimate of what is still in your system, and a Pro weight trend drawn by a named, published smoothing method. The 2026 roundup of trend and GLP-1 apps sets out what each app does, and Peptrend against Shotsy is the closer comparison for anyone choosing between the two iCloud-synced dose logs.

If you are moving from an app with an account, your weigh-ins may already be in Apple Health, and importing from Apple Health covers what crosses over. What stays free after that is listed in what stays free. If any row in the table above has changed since 18 September 2026, support is where to say so, and the table gets corrected.