Analytics for health and wellness apps

Find out which screens help people finish a check-in, book a session or log a cycle, without sending health signals tied to a person to an analytics vendor.

Start your free trial Try the live demo

14-day free trial, no credit card. The demo runs on sample data, no signup.

Why health apps are different

The rules are stricter, and regulators have shown they enforce them.

Under the GDPR, data concerning health is a special category with stricter conditions for processing it.
In the US, HIPAA covers healthcare providers, health plans and their business associates. Many wellness apps fall outside it, but the FTC's Health Breach Notification Rule can still apply to them.
In 2023 the FTC took action against GoodRx and BetterHelp over health data shared with advertising platforms.

Where analytics leaks health data

Usually not through one big mistake. Through three small ones.

Event names: A name like insulin_dose_entered reveals a condition on its own.
Identifiers: A user or device ID turns that name into a fact about a person.
Shared SDKs: Analytics tied to advertising platforms can carry it further.

What Respectlytics keeps out

Enforced by the SDKs and the API, not by a setting.

No user IDs and no device IDs. Sessions are never linked to each other.
No event properties. Readings, scores and notes cannot be attached to an event.
Country only. The IP address is discarded after the lookup.
No advertising SDKs inside, and we do not sell, rent or trade data.

Naming events in a health app

Describe the action. Leave the condition in your own database.

Instead of pregnancy_mode_enableduse tracking_mode_changed

Instead of anxiety_check_in_completeduse check_in_completed

Instead of insulin_dose_entereduse entry_logged

If HIPAA applies to your app

Decide with your legal team before any event leaves the app.

That goes for every vendor, Respectlytics included. If events must stay inside your own infrastructure, the free Community Edition runs the same server on your own machines.

Questions buyers ask

Straight answers, including the ones that might send you elsewhere.

Is Respectlytics HIPAA compliant?

Respectlytics makes no compliance claim. If HIPAA applies to your app, talk to your legal team before sending any event to any vendor, us included. The Community Edition can run on your own servers.

Can an event name be health data?

It can be, if it reveals a condition. Name events after actions, such as entry_logged, rather than conditions, such as pregnancy_logged.

What is sensitive in each, and what to keep out of event names.

Fintech and crypto No amounts, accounts or identities in events Education and kids' apps No persistent identifier for a child Dating apps Matches and messages, never who or where

Try it on your own app

14-day free trial, no credit card. Unlimited apps on every plan.

Start your free trial Read the SDK docs

This information is provided for educational purposes and does not constitute legal advice. Regulations vary by jurisdiction and change over time. Consult your legal team to determine the requirements that apply to your situation.