A meditation app may hold more than a playlist of calming sounds. Depending on the features you use, it could handle your email address, session history, journal entries, voice recordings or wellbeing check-ins.
That doesn’t mean you need to worry about an app you’ve already downloaded. It means you can make an informed choice, review the settings and decide what you’re comfortable sharing, at your own pace.
Here are 10 things to check before you download an app, or the next time you open one.
1. Find out what data it may collect
Start with the information you provide and the information the app may gather as you use it. This could include:
- Your name, email address or other account details
- Which sessions you complete, and how often
- Journal entries or reflections
- Voice recordings or transcripts
- Mood, sleep or other wellbeing check-ins
- Technical information, such as your device type or app crashes
Not every app collects all of this. The key is whether it clearly explains what it collects and why. Think carefully before entering details that identify you or other people.
2. Read the privacy policy for useful answers
You don’t need to read every line of a privacy policy before trying an app. Search it for practical details: what data is collected, why it is used, how long it is kept, who it may be shared with and how you can request deletion.
Look for a named organisation responsible for the app and a way to contact it. Check whether your data could be processed outside the UK, too. If the answers are vague, or the policy doesn’t seem to match the app’s features, that’s a reason to pause and find out more.
For general information about your rights, the Information Commissioner’s Office (ICO) has guidance on personal data and online services.
3. Check which permissions it asks for
An app may request access to your microphone, notifications, health data, contacts or location. Some permissions can support a feature you want: a microphone might be needed for a guided voice exercise, for instance.
Ask yourself: Does this permission make sense for the feature I’m using? If not, deny it or leave it off. You can often review permissions later in your phone’s settings. An app asking for access doesn’t mean you have to grant it.
4. Find out whether your data is shared
“Not sold” and “not shared” are not the same thing. An app may say it doesn’t sell your information but still share some data with service providers that support hosting, payments, analytics or customer support.
Look for details about who receives the data and what they use it for. If the app mentions third parties without explaining their role, or leaves you unsure whether journal content or check-ins are included, ask before adding anything sensitive.
5. Look for analytics and advertising
Some apps use analytics to understand how people use their features. Others may include advertising or tools that measure how effective adverts are. These systems can involve information about your activity.
Check whether analytics or marketing are optional, whether you can switch them off, and whether they are linked to your account. A meditation habit, mood check-in or journal entry can be personal, even if it isn’t your name.
A service that says it uses analytics isn’t automatically unsuitable. You’re looking for a clear explanation and choices that work for you.
6. Ask what “delete my account” means
Deleting an account may not immediately remove every record associated with it. Some information might remain in backups for a period, or be retained where there is a legal reason. The app should explain what deletion covers, how to request it and what happens to backups or other copies.
Check whether you can delete journal entries and recordings separately from your account. Don’t assume that uninstalling an app deletes the data stored in your account. If the instructions aren’t clear, contact the provider before sharing information you may later want removed.
7. Understand what encryption does, and doesn’t, tell you
Encryption can help protect information as it moves between your device and a service, or while it is stored. But the word alone doesn’t tell you who can access your information.
If an app syncs your journal to a server, ask whether the provider can read that content. End-to-end encryption is designed so that only the intended users hold the keys needed to read the protected content. It is different from an app simply encrypting data during transfer.
The ICO’s encryption guidance explains that encryption is one possible security measure; it does not remove every risk. A clear explanation of what is encrypted, where and who holds the keys is more useful than a broad security claim.
8. See whether the app works offline or on your device
Try a simple test: switch off Wi-Fi and mobile data, then open the app. Can you still access the sessions or journal features you use?
Offline access can be a useful sign that some functions work without sending information to a service each time. But it doesn’t prove that no data is ever collected. Check what happens when you reconnect, enable sync or back up your device.
9. Consider local-first alternatives
A local-first approach aims to keep information on your device, rather than sending it to a server by default. Some apps may offer this for particular features; others may require an account or cloud sync.
Local storage can give you more control, but it has trade-offs. If your phone is lost, damaged or replaced, you could lose information unless you have a secure backup. Check whether backups include your journal or recordings, and make sure your device has a strong passcode.
You decide which trade-off suits you. For some people, convenient syncing matters most. For others, keeping private reflections on one device feels like the better fit.
10. Audit an app you already use
You don’t have to make a snap decision or delete an app. Work through this quick review:
- Open your phone’s settings and check the app’s permissions.
- Review the privacy policy and look for data collection, sharing, retention and deletion details.
- Turn off permissions and optional features you don’t use.
- Check whether you can download, delete or keep your information offline.
- Decide what you’re comfortable recording in the app from now on.
You can also ask the app provider a direct question: “Can your team or any third party access my journal entries or wellbeing check-ins?” A useful answer should address the question plainly.
Privacy should support wellbeing, not add pressure
Meditation apps can be useful tools for mental health and stress management. If you work in TV, film or another creative field, a private moment to pause may help you manage demanding schedules, pressure and the risk of burnout. But using an app should feel like a choice, not another source of concern.
At Rushmind, confidentiality is built into our coaching practice. NDAs are standard, and records are kept securely. We value a local-first philosophy where it is appropriate: collecting less and keeping information closer to the person it belongs to. That doesn’t mean every tool is risk-free; it means privacy questions deserve clear answers.
Coaching is not a meditation app, therapy or medical advice. Rushmind supports professionals in the creative industries with career, relationships and mental health coaching, including the pressures that can contribute to burnout.
If you want to talk through stress management for creatives or the realities of mental health in the film industry, book a free starter session with Rushmind. You decide what you want to discuss. No pressure, just a first conversation to see if it feels like a fit.