Account and Data Deletion

The PumpSync-hosted backend stores minimal subscription and installation metadata and does not persist Tandem credentials, Tandem tokens, raw Tandem events, or normalized Tandem samples.

Effective date

Effective date: August 20, 2026

Last updated: August 20, 2026

Delete pump account credentials from the device

In the PumpSync app:

  1. Open Settings.
  2. Open Tandem Account (in the PumpSync section).
  3. Tap Remove Credentials.

Deleting your pump account credentials prevents future syncs until credentials are added again.

Revoke Apple Health access and delete Health data

Apple Health permissions and any samples PumpSync has already written are controlled by Apple Health, not by PumpSync. Apple documents the current steps for both: see Apple Support: view and delete Health data.

Deleting PumpSync does not automatically delete samples already written to Apple Health.

Delete PumpSync-hosted backend metadata

The preferred way to request deletion is from the PumpSync app:

  1. Open PumpSync.
  2. Open Settings.
  3. Open Data Handling.
  4. Tap Delete Data Request.
  5. Send the prefilled email.

The app includes the PumpSync installation ID needed to locate hosted metadata associated with that app install. Possession of the installation ID is also how deletion requests are verified; no other personal information is needed.

If you plan to delete the app, copy your installation ID first. It is stored only on that device and cannot be recovered after the app is deleted.

If you cannot send the request from the app, email support@ericslutz.dev with the subject DELETION REQUEST - PumpSync Support.

Include your PumpSync installation ID. To find it in the app, open Settings, then Developer, then copy the Installation ID.

If you already deleted the app and no longer have the installation ID, email the same address anyway. Hosted metadata can be located from App Store subscription records where possible, and requests without an ID are handled on a best-effort basis.

Do not include pump account passwords or tokens, service tokens, App Store or App Attest receipts, screenshots containing health data, or other sensitive medical details.

Deletion covers metadata stored by the PumpSync-hosted backend associated with the subscription or installation, subject to records PumpSync must retain for security, fraud prevention, legal compliance, billing, dispute handling, or service integrity.

Hosted server-side metadata means the records listed in the privacy policy's Backend storage section: subscription entitlement state, installation mappings, renewable device-session records, encrypted App Attest receipts, categorical fraud-risk outcomes, rate-limit events, sync attempt metadata, idempotency records, and redacted operational audit events.

A completed deletion request removes the App Attest receipt and risk outcome associated with the deleted hosted key. Outside a deletion request, those records are automatically deleted no later than 30 days after the key becomes inactive.

Deletion requests are processed within 30 days, and you will receive a reply confirming when deletion is complete.

Subscription billing is separate

Requesting data deletion or deleting the app does not cancel a PumpSync subscription.

Manage or cancel the subscription in your device's subscription settings or through Apple's manage-subscriptions guide.

Self-hosted users

Self-hosted users control their own backend data and should delete data directly from their self-hosted storage account or database.

Beta and TestFlight data

For beta and TestFlight builds, PumpSync may reset backend data during testing. Testers can request deletion using the same support path above.