← Back to Blog

Invisalign App Privacy: What Aligner Apps Actually Collect

You downloaded an aligner timer app to help manage your daily wear time. Simple enough. But have you looked at what that app collects about you?

Most aligner apps require an email address to create an account. Many collect usage analytics, device identifiers, and diagnostics. Some share data with third-party advertising or analytics services. For an app whose core function is starting and stopping a timer, that is a remarkable amount of personal information.

This post walks through the App Store privacy labels of the main aligner apps on iOS in 2026, shows what the underlying policies say, and closes with what "zero data collection" actually means in technical terms. Everything here is sourced from public App Store listings and published privacy policies — I link to every source below.

What Most Aligner Apps Collect

Apple requires every app on the App Store to disclose what data it collects through privacy "nutrition labels." These labels appear on each app's App Store page under "App Privacy" (Apple's developer documentation on privacy labels). Here is what you will find when you check the labels for popular aligner apps:

Account information

Most aligner apps require you to create an account with your email address before you can use them. Some also collect your name, date of birth, or location. This information is stored on the developer's servers, which means your decision to use an aligner timer is now tied to your personal identity in a database you do not control.

Usage analytics

Many apps send anonymized (or pseudonymized) usage data to analytics platforms like Firebase Analytics, Mixpanel, or Amplitude. This typically includes which screens you visit, how long you spend in the app, which features you use, when you open and close the app, and your session patterns. Even "anonymized" data can reveal a lot about your daily habits when it includes precise timestamps of when you eat every meal.

Device identifiers and diagnostics

Crash reporting and diagnostics tools (like Firebase Crashlytics) collect device model, OS version, and often a unique device identifier. These can be used to build a profile of your device and, combined with other data, can be linked back to you.

Third-party SDKs

When an app includes third-party SDKs (software development kits) for analytics, advertising, social media, or crash reporting, each SDK may collect its own data according to its own privacy policy. The app developer may not even have full visibility into what these SDKs transmit. Firebase alone can collect device identifiers, IP addresses, and app usage data.

Why This Matters for Aligner Data

You might think: "It is just a timer app. Who cares if they know when I eat breakfast?"

Fair point. But consider what an aligner timer actually records over weeks and months:

  • Your daily eating schedule -- every meal, every snack, with precise timestamps
  • How long you eat -- session durations reveal meal patterns
  • Your daily routines -- when you wake up (first session), when you go to bed (last session)
  • Your social patterns -- long evening sessions suggest dinners out; weekend patterns differ from weekdays
  • Your dental wear compliance -- this is health-adjacent data about how consistently you follow a medical recommendation

Individually, none of these data points are particularly sensitive. Collectively, over 6-18 months of aligner wear, they form a remarkably detailed picture of your daily life, habits, and health behaviors.

Health-adjacent data is still sensitive. Aligner wear-time data falls in a gray area: it is not medical data in a regulatory sense, but it describes how consistently you follow a medical recommendation. Whether that data sits on someone else's server should be your choice, not a requirement to use a timer.

Case Study 1: My Invisalign (Align Technology)

My Invisalign is Align Technology's official patient app. Its global privacy notice is explicit that "health data is collected by Align from individuals wishing to use the My Invisalign App to manage their dental care and to support a patient's chosen provider," and that information about your aligner wear, aligner stage, appointments, and treatment progress may be "shared with your treating physician as part of participation in the Remote Care functions of the App."

The App Store privacy label for My Invisalign lists, among other categories, contact info, identifiers, user content (including photos), usage data, diagnostics, and health & fitness data — all linked to your identity. The privacy notice covers a large corporate data operation, not just a timer: email marketing, provider communication, analytics for product improvement, and cross-border data transfers are all described.

None of this is inherently wrong. Align is a medical device company; their patient app has genuine reasons to collect health data and integrate with clinical workflows. The point is that it is not a minimal-footprint timer app, and if that is all you want, this is not the right tool.

Case Study 2: myAngelSmile (AngelAlign / Angel Aligner)

myAngelSmile is Angel Aligner's patient companion app. As of April 2026, the App Store listing describes it as a "clear aligner tray reminder APP" and requires an account tied to your treatment plan. Like My Invisalign, the data model is built around server-side patient records: your wear time, tray schedule, and photo progression are stored on AngelAlign's infrastructure rather than locally on your phone. Policies are published on angelaligner.com.

I wear Angel Aligner myself. This was the app I used before building OutTime, and while the plan-sync features are good, the data-collection model is the same pattern as My Invisalign: account required, data on company servers, usage analytics in the privacy label.

Case Study 3: TrayMinder (Third-party)

TrayMinder is the most established third-party aligner timer. Its App Store privacy label lists identifiers, usage data, and diagnostics, linked to the user. The company's own site describes the app as "built by an orthodontist" and covers multiple brands, but like most freemium apps funded partly by subscription and advertising, it runs analytics and crash-reporting SDKs.

This is the typical pattern for a serious indie or small-team app. The data collection is real but modest, and usually aimed at product analytics rather than anything sinister. Still — it is not zero.

Privacy Labels Side-by-Side

Here is a compressed comparison of what each app discloses on its App Store listing, plus OutTime for reference:

Data Category My Invisalign myAngelSmile TrayMinder OutTime
Contact Info (email, name) Collected Collected Collected Not collected
Identifiers (user ID, device ID) Collected Collected Collected Not collected
Usage Data (feature usage, interactions) Collected Collected Collected Not collected
Diagnostics (crash data, performance) Collected Collected Collected Not collected
Health & Fitness Collected Collected Not disclosed Not collected
Photos (user content) Collected Collected Not disclosed Not collected
Account required Yes Yes Yes No
Third-party SDKs Multiple Multiple Multiple None
App Store privacy label Data Linked to You Data Linked to You Data Linked to You Data Not Collected

This is not a criticism of Align Technology, AngelAlign, or TrayMinder specifically. Each has features — ClinCheck integration, brand plan sync, cross-device support — that genuinely require an account and server infrastructure. The point is that a timer app can be built without any of this, and if you just want a timer, you should not have to hand over personal data to get one.

Why a Timer App Does Not Need Your Email

Think about what a wear-time timer actually does:

  1. You tap a button to start a countdown
  2. Time passes
  3. You tap a button to stop the countdown
  4. The app stores the session locally so you can see your daily totals

None of these steps require an email address. None require a server. None require analytics. None require crash reporting. The entire flow can happen on-device, with data stored locally in a database that never leaves your phone.

So why do most timer apps require an account? Usually for one or more of these reasons:

  • Cloud sync -- so your data transfers to a new phone. This is a legitimate feature, but Apple's built-in backup handles it without the developer ever seeing your data.
  • Analytics -- the developer wants to know which features people use and how they use them. Useful for product development, but not essential for the app to function.
  • Marketing -- your email address is valuable for sending notifications about new features, upgrades, or partner offers.
  • Advertising -- usage data and identifiers are valuable to advertising networks, even if anonymized.

These are all business reasons, not technical ones. The timer itself works just fine without any of them.

How Zero-Knowledge Architecture Works

OutTime is built on what we call a zero-knowledge architecture. The name comes from a simple principle: the developer should know zero things about you.

Here is what that means in practice:

  • No server: There is no backend, no API, no database that we control. Your data is stored on your device using Apple's SwiftData framework. Period.
  • No account: There is no login screen, no email field, no sign-up flow. You download the app and start using it. There is nothing to log into because there is nowhere to log into.
  • No analytics: No Firebase. No Mixpanel. No Amplitude. No PostHog. No Crashlytics. No telemetry of any kind. We do not know how many people use the app, which features they use, or when they open it.
  • No third-party SDKs: Zero. The app is built entirely with Apple's native frameworks. No external code runs inside the app.
  • No push notifications: All reminders are local notifications scheduled on your device. There is no push notification server, which means we cannot send you notifications remotely even if we wanted to.

The result: even if someone subpoenaed us, we would have nothing to hand over. We do not have your email. We do not have your usage data. We do not have your session history. We do not even know if you have the app installed.

The App Store privacy label confirms it. OutTime's label reads "Data Not Collected" -- the strongest privacy declaration Apple allows. This label is not self-reported on trust alone; Apple can and does audit apps that claim this status.

Why This Matters

Privacy is not about having something to hide. It is about choosing who gets access to your daily habits and health-adjacent behavior.

When you use an aligner timer for 12-18 months, you are generating a remarkably detailed log of your daily eating patterns, routines, and compliance with a dental recommendation. Whether that data sits in a database you do not control, gets analyzed by algorithms you did not consent to, or gets shared with partners you do not know about -- that should be your choice.

The simplest way to protect that data is to never collect it in the first place. That is the principle OutTime is built on.

Related Reading

Sources

A Timer That Knows Nothing About You

OutTime tracks your daily aligner out-time budget. No account. No server. No analytics. Your data stays on your device.

Free download. Optional one-time $9.99 Pro upgrade.

OutTime is a personal timer and does not provide medical advice. App Store privacy labels and published privacy policies referenced in this article are accurate as of April 2026 and may change — always check the current App Store listing and the publisher's policy page before making a decision based on this post. "Invisalign" and "ClinCheck" are trademarks of Align Technology, Inc. "Angel Aligner" is a trademark of AngelAlign Technology Inc. "TrayMinder" is a trademark of its respective owner. OutTime is not affiliated with, sponsored by, or endorsed by any of these companies.