What “no servers” actually means for your financial data

2026-07-19 · 5 min read

Every app's privacy policy says your data is safe. The document is easy to write and easy to change. Architecture is neither — and that's why the most meaningful privacy statement a finance app can make isn't a promise. It's a property: there is no server.

Two ways to build a finance app

The standard way: your transactions sync to the company's backend, where they power features, analytics — and, at many free apps, monetization. You are trusting an unending series of decisions by people you'll never meet: every engineer with production access, every acquisition, every “update to our privacy policy” email.

The other way: the app stores data on your device and syncs it through your own cloud account — for iPhone, that's your personal iCloud with its CloudKit private database. The developer operates nothing. There's no admin panel where your spending exists, no database to breach, nothing to subpoena, nothing to sell.

“We can't” beats “we won't”

• Breaches: you can't leak a database you don't have. Your data's security becomes Apple's iCloud security — audited at a scale no indie backend can match.
• Business model drift: a company that never sees your data can't be tempted to monetize it later.
• Longevity: if the developer vanished tomorrow, a serverless app keeps working. Your ledger doesn't die with a startup.

How to check any app in 30 seconds

Open its App Store page and scroll to the privacy label. “Data Not Collected” is rare in finance — most trackers collect identifiers, usage data, sometimes financial info itself. Then ask one question the marketing page won't answer: does this app work without creating an account? If it demands an email, there's a server behind it, and your data is on it.

Gilt's label reads Data Not Collected, and there is no account to create. Not because we promise not to look — because we built it so there's nowhere to look.