Insights

What You Can (and Can't) Do With Apple HealthKit Data

A man and woman stand in a field, each wearing a smartwatch, engaged in a discussion about health and fitness data.
Author
Piotr Ratkowski
Published
November 7, 2025
Last update
February 25, 2026
A man and woman stand in a field, each wearing a smartwatch, engaged in a discussion about health and fitness data.

Table of Contents

EXCLUSIVE LAUNCH
AI Implementation in Healthcare Masterclass
Start the course

Key Takeaways

  1. HealthKit requires native iOS apps. No backend API exists for remote data access from the Apple Health app.
  2. All Apple Health app data stays on-device. Mobile-first architecture and explicit user consent required for each data type.
  3. HealthKit delivers raw data, not AI insights. Additional infrastructure needed for analytics and personalized recommendations.
  4. Multi-device tracking needs unified APIs. Combining HealthKit with Garmin, Oura Ring, Fitbit requires standardized integration.
  5. Privacy comes first in HealthKit design. Transparent, consent-based access makes it ideal for compliant health app development.

Is Your HealthTech Product Built for Success in Digital Health?

Download the Playbook

If you are building a health or wellness app, Apple Health is probably the first place you look for user data. It sits quietly on every iPhone, collecting information from the Apple Watch and hundreds of connected apps. At first glance, Apple HealthKit seems like the perfect starting point for health app development. It stores everything in one place. Heart rate, steps, sleep, nutrition, even lab results. But when you start building, you quickly realize that it's not as simple as it looks. Apple HealthKit is powerful, but it also has clear limits. In this article, we will break down what you can do with Apple HealthKit data, what you can't, and how to build products that work within those rules or around them.

What Apple HealthKit Actually Is

Apple HealthKit is the framework behind health and fitness data on every iPhone and Apple Watch. If you are building a health or wellness product that needs this data, understanding what Apple HealthKit can and cannot do will shape your technical decisions and timeline.

Think of it as a local database for the user's body. Every data point gets stored on the iPhone, under the user's control. Steps, heart rate, sleep, workouts all live there.

Apps can request permission to read or write specific data types. For example, your app can read heart rate from the Apple Watch or write nutrition data after a user logs a meal.

Apple designed HealthKit with two main goals. To centralize health data from multiple apps and devices, and to keep that data private and user-controlled.

Those two goals are what make HealthKit so unique and so limited.

What You Can Do With Apple HealthKit Data?

Despite its limits, HealthKit is one of the most advanced health data frameworks available. When used correctly, it gives your app access to a huge range of information.

Core health metrics you can access:

  • Activity data like steps, distance, flights climbed, energy burned
  • Heart metrics including heart rate, HRV, resting and walking averages
  • Sleep tracking with time in bed, asleep, sleep stages from Apple Watch
  • Body measurements such as weight, BMI, body fat percentage
  • Mindfulness minutes from breathing or meditation sessions
  • Reproductive health including menstrual cycles, fertility window
  • Nutrition data covering calories, macronutrients, vitamins and minerals
  • Lab results like cholesterol, glucose, blood pressure when imported

What you can build with this data:

  • Personalized dashboards and insights tailored to each user
  • AI-driven recommendations based on real health patterns
  • Smart goals that adapt based on actual metrics
  • Early warning systems for stress or fatigue detection
  • Integration with other apps that write to HealthKit

If you are designing a mobile-first health or wellness app, HealthKit can give you everything you need to understand your users within Apple Health app ecosystem.

Table summarizing what developers can and cannot do with Apple HealthKit data, highlighting the difference between local access to core health metrics and the lack of a backend API for cloud access.

What You Can't Do With Apple HealthKit (and Why It Matters)

Now comes the important part. Apple HealthKit is not a traditional API. It is not a cloud service. It is a local data store on each user's phone.

This design protects privacy but creates serious limitations for mobile health app development. Apple built HealthKit around privacy by design principles. In the age of data leaks and algorithmic misuse, Apple chose a path where the user controls their information completely.

The core restrictions you need to understand:

No backend access exists. There is no public server API for Apple Health app. You cannot fetch user data directly from your backend or database. All access must happen through the user's iPhone or Apple Watch. This means you must have a native iOS app to read data. The user must install your app and grant permission. You cannot "pull" data from users without their active involvement.

Consent is mandatory for everything. Apple's privacy policy is strict. Every data type requires explicit user consent. Steps, heart rate, sleep each need separate permissions. If the user revokes permission, your app immediately loses access. There are no hidden or background permissions. Everything is transparent, which is good for users but can complicate your data flow design.

Real-time access is limited. HealthKit is not a live stream. You can get new data when the user opens your app or when Apple Health triggers background updates, but not continuously. If you need real-time monitoring for workouts or telehealth use cases, you must integrate directly with the Apple Watch's Workout API, not just HealthKit.

Multi-user scenarios don't work. Apple Health is strictly personal. There is no way to view or manage data for another user through the same device or cloud. This makes multi-user or team dashboards difficult to build unless each user syncs their own data to your backend.

Web-only apps are impossible. Many startups begin with a web-based dashboard and later realize they cannot access HealthKit data from it. Because there is no backend API, your app must run on iOS. You can still have a web dashboard for visualization, but the data must first be collected on the user's phone.

The Mobile-First Reality of HealthKit Development

Apple Health app forces developers to think differently. Instead of connecting to a cloud API, you need an native iOS app that acts as the data gateway.

Here's how it usually works:

  1. The user installs your iOS app and gives permission
  2. Your app reads selected data from HealthKit
  3. With consent, your app uploads it securely to your backend
  4. Your backend processes or analyzes the data
  5. You present insights back to the user on their phone or web dashboard

This loop works, but it takes engineering effort. You must handle permissions, background sync, and data normalization while maintaining compliance across all of it.

For many early-stage startups, this becomes the bottleneck between idea and product.

{{lead-magnet}}

How to Work Around HealthKit Limitations

If you understand HealthKit's boundaries, you can design around them smartly.

Build a native app first. Even if your main product is web-based, you need a lightweight iOS app that acts as the data bridge. This app can sync data locally and send it to your backend with user consent.

Normalize and standardize data. HealthKit data types are rich but not uniform. Different apps may log steps, heart rate, or sleep differently. You need ETL processes to make it consistent.

Add context from other sources. Combine HealthKit data with behavioral or environmental data. Calendar events, nutrition logs, or stress questionnaires can add context that wearables cannot capture.

Build transparency into the UX. Show users what data you collect, why, and how you use it. This builds trust and increases the likelihood of long-term data sharing.

These limitations are exactly what Open Wearables was built to solve. Its Flutter SDK bridges HealthKit data to a self-hosted backend with continuous background sync, and its unified API normalizes data across Apple Health and 5 other wearable providers.

See how Steppie integrated Apple Health and Google Fit to build a gamified walking app across both platforms, or how ZdroVeno uses Apple Health data for HRV-based health monitoring for seniors.

How Open Wearables Handles What HealthKit Can't

Every team building on HealthKit eventually hits the same wall: the data is locked on the user's phone, there is no backend API, and supporting additional wearables means starting a separate integration from scratch for each one.

Open Wearables is an open-source platform that solves these problems in one step. You get a single API for Apple Health, Garmin, Whoop, Polar, Suunto, Strava, and Samsung Health Connect. You host it on your own infrastructure, so the data never passes through a third party. And there are no per-user fees.

Here is how it maps to the specific HealthKit constraints covered in this article:

HealthKit Constraint How Open Wearables Solves It
No backend API. All data stays on the user's iPhone. A mobile SDK runs inside your app and continuously syncs HealthKit data to your backend in the background. Your team works with a standard REST API from that point on.
Requires building a native iOS app. The SDK works within cross-platform Flutter apps, so you don't need a separate native iOS codebase just to access Apple Health.
Combining data from multiple wearables is manual and fragile. All providers are normalized into a single data model with automatic deduplication. One integration covers all supported devices.
No built-in analytics or AI capabilities. An included AI connector lets users and internal tools query health data in natural language through models like Claude or ChatGPT.
iOS only. No path to Android wearables. The same API covers both Apple Health and Samsung Health Connect, plus cloud-connected devices like Garmin, Whoop, and Polar.

Open Wearables is MIT licensed, used in production health apps, backed by an active open-source community. Explore Open Wearables here.

Where HealthKit Fits in Multi-Device Health App Development

HealthKit is a great foundation for mobile health app development, but it is only one piece of the puzzle. If your users also wear Garmin watches or Oura Ring devices, you will need to combine those data sources too.

That is where developers face the real challenge of integration.

Apple Health, Garmin, Fitbit, Oura, Whoop each has its own API, format, and authentication flow. Bringing them together is the key to creating a complete view of user health.

To move beyond Apple's limits, many companies are now using unified wearable APIs. These platforms connect multiple devices in one integration layer and standardize data across sources.

They solve problems like:

  • Different SDKs and data models
  • Manual OAuth setup
  • Inconsistent metrics
  • Long development cycles

Unified APIs make it possible to work with Apple Health data alongside Garmin, Fitbit, Oura, and others all in one format. This is the future of health app development where interoperability doesn't mean complexity.

Apple HealthKit vs Google Health Connect: What Product Teams Need to Know

If your product targets both iOS and Android users, you will need to work with two completely separate health data frameworks: Apple HealthKit on iOS and Google Health Connect (formerly Google Fit) on Android.

Both share the same fundamental constraint: health data lives on the user's device, not in the cloud. Neither offers a server-side API. Both require a mobile app to access the data, and both require explicit user consent for each data type.

Feature Apple HealthKit Google Health Connect
Platform iOS only Android only
Where data lives On the iPhone On the Android device
Server-side API None None
Requires mobile app Yes Yes
Historical data access Full sync supported Varies by data type
User consent model Per data type Per data type

The practical impact for product teams: supporting both platforms doubles the integration work. You need separate mobile implementations, separate consent flows, and separate data normalization before you can present a unified view to users. This is one of the main reasons teams look for unified wearable platforms that handle both through a single integration.

{{lead-magnet-2}}

What Apple Health Can and Can't Do for You

What You Can Do What You Can't Do
Read and write health data locally on iOS Access data from a backend directly
Get user consent for specific data types Read data without consent
Combine metrics from multiple apps Stream real-time data continuously
Build personalized insights Get analytics or AI features out of the box
Sync with the Apple Watch ecosystem Build only a web app
Store data securely on-device Access another user's data

The Opportunity for Mobile Health App Developers

Apple HealthKit is not perfect, but it's the foundation of mobile health. It gives developers access to the richest health dataset available on iOS if they design for it properly.

Companies that understand its rules can use it as a competitive edge. They can offer privacy-first experiences, build user trust, and expand into other wearables using unified APIs later.

In the end, HealthKit is not about limits. It's about building responsibly in a space that touches people's most private data.

Start Mobile-First with HealthKit, Build Unified

Apple HealthKit is both a gift and a challenge. It gives you access to powerful health signals but locks them inside a secure ecosystem.

To use that data at scale, you need a native mobile layer, a secure backend, and a unified data model that can combine multiple devices.

That is the path to building health apps that are not only functional but future-proof.

Frequently Asked Questions

What is Apple HealthKit and how does it work with the Apple Health app?

Apple HealthKit is Apple’s developer framework that lets apps read and write Apple Health data (e.g., heart rate, steps, sleep) with user permission. The Apple Health app is the user-facing dashboard; HealthKit is the API your app uses to securely access those data types.

What HealthKit data can my app read or write?

It depends on HealthKit data types and user consent. Common reads: steps, distance, heart rate, HRV, sleep, SpO₂, workouts. Common writes: workouts, mindful minutes, nutrition, body measurements. Some categories are read-only or write-only; you must request granular HealthKit permissions for each type.

Can I access Apple Health data from a web application?

No. Apple Health data is stored locally on the iPhone and requires a native iOS app to access. There is no backend API or web-based access method available.

Can I send Apple HealthKit data to my server or share it with third parties?

Yes, if your app flow is transparent and compliant. Once data is in your app, you can securely transmit it to your backend for processing—provided you follow privacy, consent, and (when applicable) HIPAA/GDPR requirements. You cannot bypass user consent or misrepresent data usage.

What are the limits of Apple HealthKit data? What can’t I do?

You can’t stream raw Apple Watch sensor signals (e.g., raw PPG), access data without consent, or read types you didn’t request. HealthKit doesn’t guarantee real-time clinical-grade accuracy, and some metrics have delays or depend on device support. HealthKit also doesn’t replace EHR or FHIR interfaces out of the box.

Can Android apps use Apple Health or HealthKit data?

Not directly. Apple HealthKit is iOS-only. Cross-platform apps usually sync iOS data to a backend and expose insights to Android via the server. For Android-side device data, use native sources (e.g., Google Fit or vendor APIs).

Can my app export or delete HealthKit data?

Users can export from the Apple Health app. Your app can provide its own export for the data it collected and can delete records it wrote (and, with permission, some records it read). Always respect data ownership and make deletion options easy to find.

Is HealthKit data HIPAA-compliant?

HealthKit itself is neither HIPAA-compliant nor non-compliant. HIPAA compliance depends on how your application handles the data after reading it from HealthKit, not on the framework itself.

Apple encrypts HealthKit data at rest on the device and during iCloud sync. That covers storage-level security. But once your app reads that data and sends it to your backend, responsibility shifts to you. HIPAA compliance requires encryption in transit, encryption at rest on your servers, access controls with audit logging, a signed Business Associate Agreement (BAA) with your infrastructure provider, and documented policies for data handling, breach notification, and employee training.

If you are building a HIPAA-covered application that processes HealthKit data, your backend architecture matters more than the HealthKit integration itself. Self-hosted platforms like Open Wearables are designed with encryption, audit logging, and access controls that support HIPAA-ready deployments when paired with compliant infrastructure.

For more on HIPAA in health app development, see our guides on HIPAA violation examples and Zoom HIPAA compliance.

Can I access Apple Health data without building a native iOS app?

Not directly. HealthKit is an on-device framework, so you need a mobile app to request permissions and read the data. But you don't have to build a native Swift app from scratch. Solutions like Open Wearables provide a cross-platform mobile SDK that handles HealthKit permissions and background sync within a Flutter app. The SDK reads HealthKit data on the device and syncs it to your backend automatically. From there, your web app, dashboard, or any other system can access the data through a standard REST API.

For a deeper look: Do You Need a Mobile App to Access Apple Health Data?

How do I get Apple Health data to my backend server?

Since HealthKit has no server-side API, you need a mobile app that reads data on the device and sends it to your server. Most teams evaluate three paths:

  1. Build it yourself. Your engineering team creates the mobile sync layer, handles background updates, manages network failures, and maintains the pipeline as Apple changes APIs. Typically 2 to 4 months of dedicated engineering, plus ongoing maintenance.
  2. Use a SaaS provider. Services like Terra or Vital handle the data pipeline for you. The trade-off is cost ($1 to $3 per active user per month) and the fact that user health data passes through their servers, which can complicate HIPAA and data residency requirements.
  3. Use an open-source platform. Open Wearables handles the sync pipeline, but you host it yourself. No per-user fees, data stays on your infrastructure. The trade-off is that you manage the hosting.

Can I use Apple Health data with AI tools like ChatGPT or Claude?

Yes, but not directly. HealthKit provides raw data on the device with no AI built in. To connect it to AI, you first need to get the data off the device and onto a server.

Once the data is on your backend, Open Wearables includes a built-in AI connector that lets users query their synced health data in natural language: "How did my sleep change this week?" or "Compare my resting heart rate across the last 30 days." It works with Claude, ChatGPT, and other models.

For individual analysis of Apple Health export files (not live sync), see our separate Apple Health MCP Server project.

Written by Piotr Ratkowski

Head of Growth
Grows Momentum's client portfolio and advises HealthTech teams on product strategy, market positioning, and where AI actually makes a difference. Writes about the trends and decisions shaping digital health.

See related articles

Ready to make Apple Health work for you?

Let's Create the Future of Health Together

Integrate HealthKit the right way: securely, efficiently, and alongside other wearables with our open-source toolkit.

Looking for a partner who not only understands your challenges but anticipates your future needs? Get in touch, and let’s build something extraordinary in the world of digital health.

Newsletter

The 2026 Wearables Integration Playbook

A practical guide to integrating Apple Health, Garmin, and Oura without vendor lock-in. See architecture patterns, data normalization strategies, and compliance considerations for modern health apps.

Download the Playbook

Need HealthKit data on your backend without building the infrastructure from scratch?

Open Wearables is an open-source platform that gives you a unified API for Apple Health, Garmin, Whoop, and 6 other wearable providers. Self-hosted, no per-user fees, and ready for production. Teams typically go from setup to first data in under a week.

Read the documentation
Piotr Ratkowski