The things we type into wellness apps are, on paper, the most intimate sentences we've ever written.
Cycle symptoms. Mood logs. Things we're grateful for. Things we're angry about. Therapy homework. Private notes to future selves. Food we ate and how we felt after. Dreams. Sleep. Sex. Grief. Money worries. The kind of sentences we used to burn at the bottom of a page.
And we type them into boxes owned by strangers.
Some of those strangers are fine. Most of them have a privacy policy. A few have even read it. Almost all of them reserve the right to use your data, in aggregate or otherwise, for purposes including "improving the service", a phrase broad enough to drive a truck through. The data is stored on their servers. It's backed up in places you cannot see. It's accessed by employees you will never meet. When the company is acquired, and most of them are, eventually, the data goes with it.
This is not a conspiracy. It's the shape of the business. Wellness apps are free or cheap because the data is the product. You already knew that. You just didn't feel it, because the alternative (writing these things down somewhere actually private) was, until recently, harder.
It isn't anymore.
A local-first app is exactly what it sounds like. It lives on your machine. Your journal entries sit in a folder you can see. Your cycle data is a file. Your mood log is another file. If you want to back them up, you pick where. If you want to delete them, you delete them. Nobody is aggregating them. Nobody is training on them. Nobody is acquiring them in a $200M exit two years from now.
Every specsy spec defaults to local. That's not a premium tier you unlock by paying more. It's the architecture. You run the app on your machine, and the data stays there. The only network call is the one that built the app in the first place. After that, you can unplug.
A few categories where this matters most.
Journaling. The oldest private form of writing, currently being harvested for model training across the industry. A journaling spec is a folder of text files on your laptop. That's it. That's the whole architecture. No account. No cloud. No we've updated our terms.
Cycle and health tracking. After 2022, this stopped being theoretical in the US. A cycle-tracking spec does not phone home. There is no remote record of your period. There is no company that could, under any subpoena, hand one over, because there is no company, and there is no remote record.
Therapy notes. The sentences you write between sessions. The pattern-spotting. The letters to yourself that you'll never send. Not all of this belongs in a HIPAA-adjacent box run by a startup that may or may not exist in three years.
Money. Your transactions, uncategorized or otherwise, don't have to pass through a third party to show you a pie chart. A CSV from your bank and a local spec will do it.
Relationships. The notes you keep about your own life, your own kids, your own parents. The things you would be genuinely distressed to learn had been read by anyone.
There's a version of the internet where "private" is a feature you pay extra for. A little padlock icon on the pricing page. A line about end-to-end encryption in marketing copy. Privacy as premium tier. That's the version we have, and it's the version we got used to.
There's another version where private is the default, because the app lives on your machine, and nobody else is invited. It's quieter. It doesn't have a marketing team. It doesn't send a monthly email asking how it's doing. It just works, on your laptop, for as long as your laptop works.
The cheapest path we know to that second version is a spec. Pick the one that matches the thing you'd be most embarrassed to see leaked. Build it. Keep it.
Your journal shouldn't live on someone else's server.
Your journal should live in your house.
