Your lab results never leave your phone.
Localabs is built so that we — the developer — cannot see your data, even in principle. There is no server to host it on. This policy explains exactly what that means in practice.
The short version
Localabs collects no personal information, runs entirely on your device, and shares nothing with us or any third party. The only network call the app ever makes is a one-time download of the AI model file (~2.5 GB) from Hugging Face on first launch.
1. Who we are
Localabs is published by Bithunch LLC. You can contact us at support@localabs.app.
2. What data Localabs processes
Localabs reads and processes the following data, entirely on your iPhone:
- Lab reports and clinical notes you scan, photograph, or import as PDFs. These are stored locally inside the app's sandbox.
- Apple Health data (activity, sleep, vitals, mobility, body metrics) if you grant HealthKit permission. Data is read on-device and only ever used as silent context for the AI's analysis. It is never written to disk by Localabs.
- Profile information you choose to enter — age, biological sex, blood type, medications, conditions, lifestyle. Stored locally in the app's sandbox.
- Chat history between you and the on-device AI. Stored locally and deleted when you delete the associated report.
3. What Localabs does NOT do
- No account, no sign-in. Localabs requires no email, no Apple ID, no social SSO. We don't know who you are.
- No analytics or telemetry. There is no Firebase, no Mixpanel, no Sentry, no Amplitude, no Crashlytics, no Meta SDK, no Google SDK, and no first-party analytics bundled with the app.
- No advertising. Localabs does not show ads and does not share data with any advertising network.
- No data sales. We have no data about you to sell.
- No tracking across apps or websites. Localabs does not use Apple's App Tracking Transparency framework because it never tracks you.
4. The on-device AI
The medical AI model Localabs uses (a quantized version of Google's MedGemma 4B) runs locally on your iPhone's GPU using the open-source llama.cpp runtime. Every translation, every chat reply, and every Trends interpretation happens on your device. Your prompts and the model's responses never leave your phone.
5. Network access
Localabs makes network requests in exactly one situation: the first time you launch it (or the first time you switch models), the app downloads the model weights file from Hugging Face. Hugging Face will see this request like any other file download — your IP address may appear in their CDN logs as a standard side effect of HTTP. Once downloaded, the model lives on your device and the app does not contact the network again.
6. Apple Health (HealthKit)
If you grant HealthKit access, Localabs reads the following metric categories from the past ~30 days: activity (steps, distance, exercise minutes), sleep, vitals (resting heart rate, HRV), mobility (walking speed, stair climbing), and body metrics. These values are folded into the AI's analysis prompt as silent context and are never quoted as findings, stored on disk by Localabs, or transmitted anywhere. If you revoke permission later in Settings, Localabs immediately stops reading them.
7. Children's privacy
Localabs is intended for adults interpreting their own medical results. It is not directed at children under 13 and we do not knowingly collect data from children.
8. Your rights and choices
Because Localabs holds no data about you on any server, traditional rights like "data export" or "right to deletion" are satisfied locally on your device:
- Delete a single scan: open History, swipe or long-press the report, choose Delete.
- Delete everything: Profile → Reset App. This wipes every scan, every chat, your profile, and the AI model.
- Uninstall: long-press the app icon on your home screen and choose Remove App. iOS deletes the entire sandbox.
9. Security
All data Localabs writes is stored inside iOS's app sandbox and protected by the operating system's Data Protection class (encrypted at rest when your device is locked with a passcode or biometric). Localabs does not implement its own server or cloud backup.
10. Changes to this policy
If we update this policy, the new version will be posted at this URL with an updated "Last updated" date. Material changes will also be noted in the app's release notes.
11. Contact
Questions about privacy, or this policy: support@localabs.app.