What a focus app can see about you

A focus app asks for a strange amount of trust. To do its job it wants to know which apps you can't leave alone, when you reach for your phone, and, if you use location rules, where you are all day.

Almost no other category asks for that combination. It's worth knowing what's really being handed over, and the useful distinction isn't between apps that promise more or less. It's between a promise and a structure.

A promise is a sentence in a policy: we don't sell your data. It can be true today and untrue after an acquisition, and you can't check it. A structure is an arrangement where the data was never collected, so there's nothing to sell, leak, subpoena or change your mind about. Only the second survives the company.

What iOS refuses to tell any app

The most important privacy guarantee in this category isn't offered by the apps at all. It's imposed on them.

When you choose apps to block, iOS hands the app an opaque token instead of a name. The app can pass it back to say "shield this" and can't open it to read what it points at. No app built on Screen Time knows which apps you selected, whatever its policy says, because the system never tells it.

That's worth holding onto, because it means one of your most revealing pieces of information, the apps you personally can't put down, is protected by the operating system rather than by anybody's good intentions. It's also why no such app can list your blocked apps by name, and why a product claiming to is doing something other than what it appears to.

The questions worth asking instead

Since app selections are safe by construction, the meaningful questions are about everything else:

• Is there an account? An account implies a server, and a server implies a copy of your data somewhere you can't see. No account is a stronger statement than any policy sentence.
• Where are saved places stored? Location rules mean street addresses. Coordinates are among the most sensitive data on a phone.
• What is in an analytics event? "Anonymous analytics" isn't one thing. Event names and counts are very different from task titles and place names.
• Is analytics on by default? Under UK and EU rules, non-essential analytics need affirmative opt-in. An app that starts with it on has made a decision about you.
• Can you delete everything, and does it really go?

Motiv's answers

There's no account and no Motiv backend, so your routines, tasks, blocks, saved places and Focus Score have nowhere to be sent. They're on your device.

Two things do involve Apple, on Apple's own terms: an App Store purchase, and Apple Maps if you search for a place to use in a location rule.

Analytics and crash reporting are separate choices, both off until you switch them on, in onboarding or in Settings. When on, what's sent is kept narrow: event types, counts, durations, app version, device model. Never task titles, notes, place names, coordinates, or which apps you blocked. Either can be withdrawn at any time, which stops the provider immediately and clears anything queued on the device. Motiv also keeps a local record of the choices you've made, so you can see exactly what you agreed to and when.

The Privacy Policy sets out every category in detail.

The trade-off, stated plainly

Local-first has a real cost, and an app that only tells you the upside is selling you something.

There's no backup. No account means no cloud copy, which means if you delete Motiv or move to a new device, your setup is something to rebuild rather than restore. Worth knowing before you delete the app to test something.

Nothing syncs. Every device is a separate setup. For app selections this isn't even a choice. Those opaque tokens are issued per device, so a token from your old device means nothing on the new one, and no sync feature could carry them.

That's the honest trade for a product with nothing to breach. We'd rather you weigh it than be surprised by it.

Checking any app's answer yourself

You don't have to take anyone's word for it, including ours:

• Read the App Store privacy label before installing. It's the developer's own declaration, and "Data Not Collected" is a specific claim they're accountable for.
• Look for the opt-in. Find the analytics toggle and see what state it starts in.
• Look for the deletion path. A real one clears everything and says what it cleared.
• Ask what happens to your data if the company is acquired. Where there's no server, the answer is "nothing", which is the point of the arrangement.

More on what Motiv does with what it holds is in how Motiv works, and the system-level constraints behind all of this are in the Apple limits guide.