How to read an App Store privacy label in 5 minutes
Every app on the App Store has a "privacy label" — Apple's required disclosure of what data the app collects. For most apps it's a quick check. For a porn-recovery app, where the data is unusually sensitive, it's the single most useful five-minute audit you can do before you tap Install.
Where to find it
On the App Store page, scroll down past the screenshots, the description, and the ratings. You'll see a section called App Privacy. Tap See Details to expand.
The label is broken into three sections — and the order matters.
Section 1 — "Data Used to Track You"
This is the section to read first. It lists every type of data the app uses to track you across other companies' apps and websites — for advertising, attribution, or marketing.
For a porn-recovery app, this section should be empty. If anything is listed here, that's a red flag worth taking seriously. There's no good reason a recovery tool needs to track you across other companies' apps.
Common things you'll see in this section on apps that don't pass: Identifiers (your device's unique ID), Usage Data, and Diagnostics — all marked as "used for tracking."
Section 2 — "Data Linked to You"
This section lists data the app collects that's tied to your real-world identity (usually via email, phone number, or device ID).
What's reasonable here: nothing, ideally, in a recovery app. If you have to create an account to use the app, expect "Contact Info" (email) and "Identifiers" (device ID) to appear. That's not necessarily a deal-breaker, but it tells you the app's privacy posture: your usage is tied to your identity.
What's a red flag: "User Content" linked to you. That means the app is storing what you write, log, or record on its servers in a way it can connect back to you. For a recovery app, "User Content" can include journal entries, reflections, urge logs, voice notes. Linked-to-you means: someone at the company could read it.
Section 3 — "Data Not Linked to You"
This is anonymous data — collected, but not connected to your identity. Most reasonable apps have something here: aggregate usage stats ("how many people opened this screen"), crash reports, broad demographics.
For a recovery app: this is fine. Anonymous usage signals help the developer improve the product without seeing who you are. Tools like TelemetryDeck, Plausible, and Fathom — used by Escape and other privacy-respecting apps — fall into this category.
The four red flags
If you only spend two minutes on the privacy label, look for these four things:
- Anything in "Data Used to Track You." Recovery apps have no business in this section. If something's there, the app is monetizing your behavior somehow.
- "User Content" linked to you. Means your writings, journal, voice notes can be tied to your identity by the company. Not necessarily disqualifying, but high-stakes.
- "Browsing History" linked to you. Some accountability software discloses this. It means the app sees what you browse and ties it to your account. For some users that's the explicit feature — accountability with a partner. For most others it's a privacy cost they didn't expect.
- The label says "Data Not Collected" but the app requires sign-up. If you have to create an account, the app collects at minimum your email — the label should reflect that. A "Data Not Collected" label combined with a mandatory sign-up means either the disclosure is wrong, or there's a third-party login step Apple doesn't require disclosure for. Worth digging into the privacy policy.
What "good" looks like for a recovery app
For comparison, here's what a privacy-first recovery app's label can look like in practice:
- Data Used to Track You — None.
- Data Linked to You — None.
- Data Not Linked to You — Usage Data, Diagnostics, Device ID. (All anonymous, used for product improvement only.)
That's roughly Escape's posture, and it's what's possible when the app is designed to require no account and to keep all personal content on-device. Full privacy policy spells out exactly what each line means in our case.
The label isn't the whole story
Privacy labels are required disclosures, but they're not audited by Apple in detail — companies fill them out themselves. A few apps have been caught with labels that didn't match reality. The label is the start of an audit, not the end.
For the full evaluation flow — privacy label, plus privacy policy, plus breach history, plus third-party SDK check — see the 10-minute evaluation guide. For the broader question of what to look for in any recovery app's privacy posture, see the privacy pillar.
Escape is a Safari content blocker, a 90-second urge ritual, practice games that retrain how you meet an urge, and 27 short courses on identity and the long arc of recovery. No account, no personal tracking.
