Effective date
Effective date: August 20, 2026
Last updated: August 20, 2026
The PumpSync-hosted backend stores minimal subscription and installation metadata and does not persist Tandem credentials, Tandem tokens, raw Tandem events, or normalized Tandem samples.
Effective date: August 20, 2026
Last updated: August 20, 2026
In the PumpSync app:
Deleting your pump account credentials prevents future syncs until credentials are added again.
Apple Health permissions and any samples PumpSync has already written are controlled by Apple Health, not by PumpSync. Apple documents the current steps for both: see Apple Support: view and delete Health data.
Deleting PumpSync does not automatically delete samples already written to Apple Health.
The preferred way to request deletion is from the PumpSync app:
The app includes the PumpSync installation ID needed to locate hosted metadata associated with that app install. Possession of the installation ID is also how deletion requests are verified; no other personal information is needed.
If you plan to delete the app, copy your installation ID first. It is stored only on that device and cannot be recovered after the app is deleted.
If you cannot send the request from the app, email support@ericslutz.dev with the subject DELETION REQUEST - PumpSync Support.
Include your PumpSync installation ID. To find it in the app, open Settings, then Developer, then copy the Installation ID.
If you already deleted the app and no longer have the installation ID, email the same address anyway. Hosted metadata can be located from App Store subscription records where possible, and requests without an ID are handled on a best-effort basis.
Do not include pump account passwords or tokens, service tokens, App Store or App Attest receipts, screenshots containing health data, or other sensitive medical details.
Deletion covers metadata stored by the PumpSync-hosted backend associated with the subscription or installation, subject to records PumpSync must retain for security, fraud prevention, legal compliance, billing, dispute handling, or service integrity.
Hosted server-side metadata means the records listed in the privacy policy's Backend storage section: subscription entitlement state, installation mappings, renewable device-session records, encrypted App Attest receipts, categorical fraud-risk outcomes, rate-limit events, sync attempt metadata, idempotency records, and redacted operational audit events.
A completed deletion request removes the App Attest receipt and risk outcome associated with the deleted hosted key. Outside a deletion request, those records are automatically deleted no later than 30 days after the key becomes inactive.
Deletion requests are processed within 30 days, and you will receive a reply confirming when deletion is complete.
Requesting data deletion or deleting the app does not cancel a PumpSync subscription.
Manage or cancel the subscription in your device's subscription settings or through Apple's manage-subscriptions guide.
Self-hosted users control their own backend data and should delete data directly from their self-hosted storage account or database.
For beta and TestFlight builds, PumpSync may reset backend data during testing. Testers can request deletion using the same support path above.