Skip to content
GutBloomGet the app
Published Updated Choosing a symptom-focused tool

What to Check Before Using a Health Diary App for Digestive Symptoms

Written by
GutBloom Team
In this article
  1. Why a symptom diary counts as sensitive
  2. What research found about how health apps share data
  3. Questions to answer before you enter anything
  4. What your rights look like in practice
  5. Practical ways to limit what you share
  6. Where GutBloom fits
  7. When to speak to a professional
  8. Sources

A food and symptom diary records when you ate, what you ate, and how your gut felt afterwards. Put together, that is health information, and it deserves a few minutes of checking before you hand it to an app. Before you start, find out what the app collects, who else receives it, how long it is kept, and whether you can export or delete your records. You do not need technical knowledge to do this; most of the answers should be in the privacy notice and the app’s settings.

This article is a checklist for readers, not a legal opinion and not a ranking of apps. It does not tell you which app is safe, because a privacy notice describes intentions and cannot prove behaviour.

Why a symptom diary counts as sensitive

UK data-protection guidance treats information about health as a special category of personal data. The Information Commissioner’s Office (ICO) defines “data concerning health” as personal data related to a person’s physical or mental health that reveals information about their health status, and says such data needs extra protection because misuse could interfere with fundamental rights, including private and family life.

A diary of bloating, bowel habits and meals fits that description. Even without a name attached, entries about your symptoms, routines and timing can say a lot about you. That is a reason to be deliberate about where the diary lives, not a reason to avoid recording. A paper notebook or a spreadsheet on your own device has privacy trade-offs too; the comparison of paper, notes, spreadsheet and tracker formats covers how format affects the diary itself.

What research found about how health apps share data

Evidence on apps is limited and ages quickly, so treat it as a reason for care rather than a measurement of today’s market.

  • A 2019 study in The BMJ (Grundy, Held and Bero) examined 24 top-rated Android medicines-related apps chosen from 821 screened in the UK, US, Canada and Australia. Nineteen of the 24 (79%) shared user data, with 55 unique organisations, and two-thirds of those organisations provided analytics or advertising-related services. The authors noted that the study was a single point in time, small, Android-only and not representative of all medicine apps, and that these were medicines apps rather than food diaries.
  • A 2024 content analysis in Asian Bioethics Review (Farag and colleagues) read the privacy policies and terms of 46 mobile health apps available in Canada and Europe between August 2022 and February 2023. It found that 40 of the 46 contained contradictory or ambiguous language about data, and only eight provided an accessible informed-consent form. The sample was small and English-language only, and the study did not assess how readable the policies were.

Neither study shows that a particular diary app misuses data. What they suggest is that sharing with analytics or advertising services can be routine, and that policies can be hard to interpret. Both findings are an argument for reading the notice rather than assuming.

Questions to answer before you enter anything

Treat these as prompts. If an answer is missing or vague, that is itself useful information.

  1. What does it collect? Look for the types of data (meals, symptoms, photographs, voice recordings, location, contacts, device identifiers) and whether each is needed for the diary to work.
  2. Who receives it? A clear notice names the categories of recipient, such as hosting or analytics providers. Look for whether health entries are kept separate from advertising or marketing use.
  3. What does it ask you to agree to? Notice whether optional uses, such as research or product improvement, are separate from what the diary needs, and whether you can decline them.
  4. Where and for how long is it kept? Look for a retention statement and the country or region where data is stored.
  5. Can you get your records out? The ICO says that, where an organisation relies on your consent or a contract with you, you can ask for data you provided in a commonly used, machine-readable format, such as a CSV file. Check whether the app also offers a self-service export, which is quicker and is useful for sharing a summary with a clinician.
  6. Can you delete it? Look for in-app account deletion or a clear contact route.
  7. How do you reach someone? A named organisation and a working contact address matter if something goes wrong.

What your rights look like in practice

Under UK data-protection law, you can ask an organisation to delete your personal data in several situations, including when it no longer needs the data for its original purpose or you withdraw consent you gave. Organisations normally have one calendar month to respond, which can be extended by two months in some cases. There are limits: a request can be refused in specific circumstances, and deleting a record in the app does not necessarily remove copies held elsewhere on your own device or in backups you made yourself.

Two cautions. First, the ICO states that its erasure guidance is under review following the Data (Use and Access) Act, so the details may change. Second, rights under UK law apply according to where the organisation operates and who is covered; an app run from another country may be governed differently. If you are outside the UK, check the equivalent rules where you live.

Exporting and deleting are separate steps. The ICO notes that receiving a copy does not delete anything, so if you want to leave an app, export first, then ask for deletion.

Practical ways to limit what you share

These are options, not requirements. Choose what fits how much detail you want to record.

  • Start small. Record only what you need to compare days. The guide to what to record describes a minimal set that preserves sequence without detailed personal context.
  • Keep identifying details out of free text if the app does not need them, such as full names of other people or your address.
  • Review permissions requested by the app, such as location, contacts or microphone, and consider whether each is needed for what you want to record.
  • Test the exit before you depend on it. Make a few entries, export them, and check that the file opens and is readable before investing weeks of records.
  • Keep your own copy of anything you plan to show a clinician, so your history does not depend on one service continuing to exist.

Where GutBloom fits

GutBloom is an Android app, and its privacy policy covers both the app and this website. The questions above are the ones to apply to it, as with any other app. If you want to check it against this list yourself, you can get GutBloom on Google Play.

When to speak to a professional

A privacy checklist does not help you interpret symptoms, and a diary does not diagnose anything. Symptoms that persist, worsen, or come with unexplained weight loss, bleeding or other changes you are worried about deserve medical attention however well they are recorded. If you want to share a diary with a doctor or dietitian, the guide to summarising digestive symptoms for a GP explains how to make it readable. This article has not been professionally reviewed.

Sources