What private by design actually means

Private by design is not a marketing badge. It is a decision made before the first line of code: the app is built so that your data has nowhere to leak, because it never leaves.

Privacy by policy vs privacy by design

Privacy by policy says we promise not to misuse your data. Privacy by design says we structured the app so there is no data to misuse. A promise depends on a company staying good forever. Design does not.

Questions that reveal the truth

• Does it need an account? If yes, your data has a home outside your phone.
• Does it make network requests to work? If no, nothing can be uploaded.
• Who holds the backup? If the app auto uploads it, you do not.
• What does the data safety label say? Honest apps declare no collection.

Why it matters for mood

Health adjacent data deserves the strictest default. A journal that lives only on your device cannot be breached on a server, shared in an acquisition, or mined for a model. That is not a feature you switch on. It is the shape of the thing.

When privacy is designed in, you do not have to trust a promise. You can just look at how the app is built.