Respectlytics Respect lytics
Menu
Replace Branch No PII collected

Replace Branch to stop collecting personal data in analytics

Migrate from Branch to Respectlytics. 5-field event schema enforces no PII at the API boundary. Helps developers avoid collecting personal data.

Example Branch call (the "before")

swift Respectlytics
import BranchSDK

Branch.getInstance().initSession(launchOptions: launchOptions) { params, error in
    // Branch fingerprint + IDFA matching happens here.
    if let referringLink = params?["~referring_link"] as? String {
        // Route the user based on the deep link...
    }
}

Branch.getInstance().userCompletedAction("Paywall Purchase", withState: [
    BranchStandardEventTransactionId: orderId,
    "revenue": price,
])

Most analytics SDKs accept arbitrary event parameters — the path of least resistance for an engineer adds user_id, email, phone, address to events over time. Respectlytics's 5-field event schema (event_name, session_id, timestamp, platform, country) rejects extra fields at the API with a 400 — making PII drift architecturally impossible.

Remove Branch cleanly

  1. 1

    Remove Branch from your build (Branch / io.branch.sdk.android:library / react-native-branch / flutter_branch_sdk)

  2. 2

    Remove Branch.getInstance().initSession(...) and userCompletedAction(...) call sites

  3. 3

    Decide what replaces Branch's deep-link routing — Universal Links + App Links are first-party alternatives (no SDK; OS-handled)

  4. 4

    Remove Branch URL schemes from your Info.plist and AndroidManifest.xml

  5. 5

    Delete the Branch app dashboard entry once events stop flowing

Branch vs Respectlytics — no pii collected

BranchRespectlytics
Accepts arbitrary event parametersYes (per-event params or properties)No (5-field schema, extras rejected with 400)
Persistent user identifier— see tool note aboveNo (session_id rotates every 2h, RAM-only)
IP address stored— see tool note aboveUsed transiently to derive country, then discarded
Per-user historical record— see tool note aboveOut of scope (use your account system)

Frequently asked questions

How do we attribute revenue to a specific user without `user_id`?

You don't — at least not in your analytics. Your billing system (Stripe, RevenueCat, App Store Connect) is the authoritative source of per-user revenue, with refund-aware totals and the appropriate access controls. Respectlytics tells you the product signal (conversion rate, funnel completion) at the session level; per-user revenue lives where it belongs.

What if our analytics team needs to slice by user segment (paid vs free)?

Encode the segment into the event name. Instead of track('paywall_view', { tier: 'paid' }), fire track('paywall_view_paid_user') and track('paywall_view_free_user'). The aggregation buckets them automatically; no per-user identity is stored.

Doesn't the country field count as personal data?

Country-only resolution is generally considered the most minimised form of geographic data and is widely accepted in privacy reviews — but consult your legal team to determine your specific situation. Respectlytics derives country from the request IP server-side, then discards the IP before storing the event.

What happens if a teammate accidentally adds an extra field to a `track` call?

The API returns a 400 with the offending field name in the response body. Your integration test fails on the first run that includes the new field, so the regression is caught at PR review — not after months of unnoticed silent PII collection.

Related migration guides

Track what matters. Collect nothing you don't.

Five-field event schema, RAM-only event queue, no IDFA, no AAID, no persistent user IDs. Helps developers avoid collecting personal data in the first place.