How Sunday uses your health data

You decide what belongs in your health story.

Sunday only works with the information you choose to share. You can review, change, or disconnect sources in the app.

Apple Health

With your permission, granted through Apple’s own permission screens, Sunday reads the health and fitness data you choose to share — steps, heart rate, sleep, workouts, blood pressure, and other measurements you allow. Your selections are controlled through Apple Health and Sunday’s connection settings, and can be changed at any time.

Sunday does not receive information you have not authorized for sharing.

Medical records

If your healthcare organization uses Epic, you can connect your MyChart account. Sunday uses Epic’s patient-authorized, standards-based interface (SMART on FHIR) to read specific categories of your record, such as lab results. This connection is optional and requires your separate authorization.

You sign in directly with Epic — Sunday never sees or stores your MyChart password. Access is read-only: Sunday can never write to, change, or add anything to your medical record. Record availability depends on your provider and the categories made available through the connected portal.

Your notes and logs

You may choose to log symptoms and other health information in Sunday. These entries keep your own context close to the information you are reviewing.

What Sunday never does

  • Never sells your health data.
  • Never shares it with advertisers, and shows no advertising.
  • Never uses your individual health data to train AI models.
  • Never writes to your medical record or your Apple Health data without your action.
  • Never diagnoses. Sunday does not provide emergency services or replace the advice of a qualified healthcare professional.
If you have an urgent health concern, contact local emergency services or a qualified clinician.

How it’s protected

Your data is encrypted in transit. It is stored in access-controlled databases where row-level security ensures only your own account can read your own records, and credentials for connected health systems are stored encrypted. Details are in the Privacy Policy. Questions: privacy@getsundayhealth.com.

Built around permission

Useful information should not require giving up control.

Connect only what helps

Choose your sources. Disconnect them later if you change your mind — revoking stops all future syncing from that source.

See the limits

Data can be incomplete, delayed, or unavailable. Sunday is designed to make room for those limits.

Keep it yours

Delete your account at any time; that removes your account and your associated health data from Sunday’s systems.