The short answer: usually not. Researchers who have audited the category found most mental-wellness apps collect and share far more than their calm branding suggests. The good news is that you can check any app yourself, in about two minutes, using pages the app stores already publish. This guide shows you how — and what a genuinely private app looks like, so you know it when you see it.
What a meditation app can know about you
Think about what these apps invite you to put into them. Not your email address — that's the least of it. The time you couldn't sleep, night after night. Your mood, logged daily, on a graph. Journal entries about the argument, the diagnosis, the thing you haven't told anyone. Which sessions you reach for — "anxiety", "grief", "panic" — and at what hour.
This is some of the most intimate data a phone can hold. Health records describe your body; a mindfulness app describes your inner life. When an app like that requires an account, runs analytics, or embeds advertising kits, that inner life becomes a record on someone else's computer, governed by a policy most of us never read.
What researchers found
In 2022, Mozilla's *Privacy Not Included team reviewed 32 mental-health and prayer apps. Twenty-eight of them earned the guide's privacy warning label, and the researchers described the category as one of the worst they had ever reviewed. Their follow-up a year later found most of the same apps had improved little. Regulators have taken notice too: in 2023 the US Federal Trade Commission banned the online-therapy platform BetterHelp from sharing sensitive health data for advertising and required it to pay $7.8 million, after the service shared users' health information with advertising platforms.
None of this means any particular app you use is careless — categories aren't verdicts on individual apps. It means the burden of proof sits with each app, and "we take your privacy seriously" on a landing page is not proof. Fortunately, real proof is published somewhere better.
How to check any app in two minutes
Both app stores now require privacy declarations, and both display them on the listing itself. The stores check these claims against what the app actually does, which makes them far harder to fudge than a marketing page.
On the App Store (iPhone and iPad)
- Open the app's listing and scroll to App Privacy.
- "Data Used to Track You" means your data is linked with other companies' data for advertising. For a wellness app, treat this as disqualifying.
- "Data Linked to You" lists what's collected against your identity — look for Health & Fitness, Sensitive Info, or Usage Data.
- The rarest label is a single line: "Data Not Collected." It means exactly what it says.
On Google Play (Android)
- Open the listing and tap Data safety.
- Read both halves: what's collected and what's shared with third parties — and whether "Health and fitness" or "Personal info" appears in either.
- The best possible answer is that the app collects no data and shares no data.
Then two quick questions
- Does it demand an account before you can breathe? An app that works without sign-in has nothing to attach your history to. (No account doesn't guarantee no tracking — read the label — but a mandatory account with no offline mode tells you where your data lives.)
- The airplane-mode test. Turn the network off. If every feature keeps working, your practice is genuinely happening on your phone. It's not a formal audit, but it's the strongest everyday signal there is.
What "private by design" looks like
A few properties, taken together, make privacy structural rather than promised:
- No accounts — nothing to sign in to, nothing to attach a profile to.
- No analytics, trackers, or ad kits — visible in the store labels, and often in independent network analyses.
- No servers of the app's own — the strongest version: there is nowhere for your data to go, so a breach of the developer can't expose what the developer never had.
- Works fully offline — the everyday proof of all of the above.
- Your data stays exportable and deletable — a backup you hold, and deleting the app deletes the data.
Where Maitora stands
We make Maitora, so grade our claims with the same checklist rather than taking our word for it. On the App Store, Maitora's privacy label is "Data Not Collected"; on Google Play, the Data safety section says it collects no data and shares no data. There are no accounts, no analytics, no trackers, no ad kits, and no Maitora servers. Every practice — breathwork, meditation, the gratitude journal, sleep stories, and the narration voice itself, which ships inside the app — runs on your device and works in airplane mode.
One thing is optional and honestly disclosed: on Apple devices you can switch on iCloud sync, which keeps your practice in step across your own devices through your own iCloud account — we have no way to see it. On Android there is no cloud of ours at all; a backup is a single file you save wherever you choose. The full detail is in our Privacy Policy, written to be read.
Try the two-minute check on us. Open Maitora's listing on the App Store or Google Play and read the label before you install anything. That habit will serve you well beyond meditation apps.