How do I keep reproductive health information private on my phone?

You track your cycle in an app. You booked an appointment, paid for a prescription, or got a test result. Maybe you live with people who do not need to know. Maybe you think about who could ask for your data where you live. A phone keeps traces of all of it: in apps, in the photo library, in location history. This page is a plain checklist of what the phone holds and what you can change today. It is not legal advice. We checked each fact against HHS and Apple on 2026-10-08.

What the law covers on your phone

HIPAA protects health information held by health plans, most health care providers and their business associates. Your phone is not one of them. HHS says the HIPAA Rules “generally do not protect” health information “stored on your personal cell phones or tablets”. The same is true, in most cases, for apps you use for yourself.

HHS is direct about what that means. Other companies may see or collect what your apps gather. Apps may use it for ads, and it may be “sold to a data broker”. Our page on medical photos on your phone covers the same rules for photos.

Period and fertility apps

Apple Health, Cycle Tracking. Apple encrypts all Health app data on a locked phone, except your Medical ID. With two-factor authentication and a passcode, Apple says your Health data in iCloud is end-to-end encrypted, and “Apple does not have the key”. Its iCloud overview lists Health among the data with end-to-end encryption by default.

Two cautions. First, Apple says other apps that work with Health “can also be used with Cycle Tracking”. Check which apps you allowed. Second, anyone who opens the phone with your passcode can open Health.

Other period apps. Each one has its own privacy policy and its own servers. Look for three things. Does data leave the phone? Can the company read it? Who does it share data with? If the policy does not say, assume the company can read it.

Deleting history in Apple Health. Apple’s steps: open Health, tap Browse, then Cycle Tracking, then View Cycle Tracking Items. Pick an older item, tap Show All Data, tap Edit, and remove items or tap Delete All.

Location: the trail between home and the clinic

HHS warns that maps, ride sharing and social media apps often collect location data. That can include “the name and location of your doctor’s office and the time and date of any visits”.

• Turn off location for apps that do not need it. On iPhone, open Settings, Privacy & Security, Location Services, and set each app you do not want to Never. On Android, HHS lists Settings, Location, App location permissions, then Don’t allow for each app.
• Check history inside the apps. HHS suggests you log in to each maps or ride app and delete its location or activity history.
• Photos carry location too. When the Camera has Location Services, Apple puts the coordinates into each photo and video. A photo taken at a clinic carries the clinic’s location in its file.

HHS adds a limit worth knowing: the carrier’s network records “cell tower locations” as a connected phone moves. If that worries you, HHS says, “consider leaving the device at home.”

Ads and tracking IDs

Apps use an advertising ID to follow you across apps. HHS gives the settings:

• Android: Settings, Privacy, Ads, Delete advertising ID. Older versions call it Reset advertising ID.
• iPhone: in the Tracking privacy setting, turn off Allow Apps to Request to Track. HHS also points to Apple’s own Personalized Ads switch.

Records, receipts and messages

Clinic paperwork often ends up as photos. A visit summary, a prescription label, a receipt, a screenshot of a test result. In the camera roll, those sit in Memories, search and every device on your account. A photo you delete waits 30 days in Recently Deleted, and our Recently Deleted guide shows how to clear it.

Keep them together, in one place, behind a code that only you know.

Where York Vault helps, and where it does not

York Vault is not a period tracker and does not read health data. It is a library with its own code, on iPhone and Android, for the copies you keep.

• Papers and results. Scan letters and receipts into PDFs with the document scanner, or add any file. Nothing goes to Photos.
• Photos you already took. The sensitive photo scan finds documents and private screenshots in the camera roll, on the phone. York Vault removes the originals after it checks each copy.
• Notes and voice notes. Keep dates, symptoms and questions for a doctor as encrypted notes. See notes and voice notes.
• A second lock. An album code keeps one album closed even when the library is open.
• If someone makes you open it. A cover code opens a separate, ordinary library. Read cover and erase codes before you set one.
• No readable file names. Your items back up encrypted to your own iCloud or Google Drive. We hold no key and cannot see file names. See what we can and cannot see.

One thing to know before you choose an app for this. York Vault has no ads, but it uses one measurement partner for its own advertising. That partner never sees the library, file names or codes. Our ad measurement page lists every event it can receive, and you can turn it off.

If you think someone is watching your phone or your location, read is someone tracking my phone.