← All posts

Blog article2 min read

Why your scans never leave your iPhone

A scan of a building is a description of the inside of a building. That is why there is no upload step in ICIDO — and why there is nothing to opt out of.

What a scan really is

It is easy to think of a scan as a file, in the way a photo is a file. It is more revealing than that.

A scan of a place describes the layout of somewhere real: where the walls are, where the doors are, how the rooms connect. For a home, that is the floor plan of where somebody lives. For a workplace, it is the internal layout of a building.

That is not data to be casual with.

So there is no upload

ICIDO's answer is structural rather than procedural. Your scans stay on your device. There is no setting to switch off, no consent screen to read carefully, and no privacy policy clause you have to trust, because there is no upload step.

What stays on your iPhone:

  • Scans and the maps built from them
  • Named places, tagged spots, rooms and buildings
  • Your history, trails and heat maps

None of it is uploaded, and none of it is uploaded later either.

What is on our servers, and why

Being honest about this matters more than sounding absolute.

ICIDO is free but it does need an account, and an account has to live somewhere. On our servers we hold your name, your email address, your country, region and city, and your preferred language — enough to sign you in and to know roughly where our users are. Anything else in your profile is optional and only there if you chose to add it.

Two columns divided by a dashed line. The left column, on your iPhone, lists scans and the maps built from them, named places and rooms, buildings and their floors, and history and trails. The right column, on our servers, lists name and email address, country, region and city, preferred language, and anything optional you chose to add.
The dashed line is crossed only when you choose to share a map file.

That is the whole of it.

What we never collect

Some of these are worth stating explicitly, because plenty of apps in adjacent spaces do collect them:

  • No medical diagnoses or health records. ICIDO never asks why you use it
  • No payment details, because it is free
  • No camera imagery
  • No advertising trackers

Sharing, if you want to

A map file can be shared — but only because you decided to share it. Handing a colleague the map of a venue you scanned is a deliberate act, not a background sync.

That is the distinction the whole design turns on: things leave your device when you move them, and not otherwise.

Related reading