PumpSync or self-hosted
Use PumpSync through an App Store subscription, or point the app at a backend you operate yourself.
PumpSync
A privacy-first iPhone app that copies insulin and carbohydrate records from your pump account into Apple Health — without keeping your login or your health data on a server.
Sync model
-
Your pump account
Credentials stay in Keychain and are sent only during an active HTTPS sync request.
-
PumpSync backend
The backend performs request-time sync work and does not persist your credentials, tokens, raw events, or normalized samples.
-
Apple Health
Insulin and carbohydrate samples are written only after the user grants Apple Health permission.
Built for controlled health-data portability.
PumpSync currently supports Tandem Source, with support for more pump services planned. PumpSync is designed around user control, Apple platform privacy protections, and minimal backend retention. You can start a sync yourself at any time, and after setup PumpSync also checks for any pump data not yet synced when the app opens and during iOS background refresh opportunities. It aims to keep Apple Health less than four hours behind, but iOS may delay background work.
Device-only credentials
Your pump account credentials stay in the device Keychain and are sent only while a sync is running.
HealthKit permission first
PumpSync writes insulin and carbohydrate samples only after you grant Apple Health permission.
No advertising use
PumpSync does not use HealthKit data for advertising, marketing, tracking, or data mining.
Processed, then discarded
Your pump data passes through the server only long enough to complete each sync — nothing is kept afterward.
Not medical advice
PumpSync is not a medical device and does not provide medical advice, diagnosis, treatment, or dosing recommendations.
Two backend paths, one privacy boundary.
The hosted service checks your App Store subscription and issues a short-lived access token. The self-hosted path lets you run your own backend and storage.
- The PumpSync-hosted backend keeps only operating records — subscription status, an app-generated install identifier, device-session public-key and verifier state, rate limits, and sync attempt logs — never your pump login or your health data.
- Self-hosted users control their own backend data and should delete data directly from their self-hosted storage account or database.
- There is no PumpSync account to create and no sign-in; hosted access is tied to your App Store subscription and the app's install identifier.
- Sync requests that carry your pump account credentials are processed immediately and never stored.
- Want to see how it works before subscribing or connecting a real account? A public demo backend serves synthetic pump data — no pump account needed. See support for how to try it.
Support and policy pages.
Use these pages for support, privacy details, terms of use, data deletion instructions, accessibility information, and age-suitability context.