Goal tracking with no account and no cloud: what you gain and what you give up
What you get when an app has no sign-in and makes no network requests, what you genuinely give up, and how to check a privacy claim yourself rather than believing the App Store label.
Almost every goal, habit and journalling app asks you to make an account before it will show you anything. It is such a standard opening that most people click through it without asking what it is for — and for a tool that keeps a record of what you are trying to change about your life, it is worth asking.
There is another design, and this page is about what it actually costs. Northstar is built that way: there is no sign-in screen, and the app makes no network requests. That is a real advantage and a real limitation, and both deserve to be stated plainly.
What an account is usually for
Accounts exist for legitimate engineering reasons: syncing between devices, restoring after a lost phone, and web access. They also exist for reasons that are about the business rather than about you — a stable identity to attach behaviour to, a subscription to attach to that identity, an email address for re-engagement, and an asset that makes the company worth more.
The important observation is that a goal tracker does not need one to work. Goals, phases, steps and a daily log are small structured records with no inherent multi-user or multi-device requirement. The account is a product decision, not a technical necessity, and it is worth knowing which one you are being sold.
What you gain
Data that cannot be breached, because it was never collected
This is the whole of it, and it is stronger than any promise about how carefully data is stored. A server that never receives your goals cannot leak them, cannot be subpoenaed for them, cannot have an employee browse them, and cannot hand them to whoever buys the company. Encryption at rest is a good practice; not having the data is a different category of guarantee.
And this is a category of data worth thinking about. A goal log says what you are ashamed of, what you are trying to fix, when your discipline collapsed and for how long. It is closer to a diary than to a to-do list.
No behavioural profile
If there is no analytics SDK, nothing records which screens you opened, how long you hesitated, or what time of night you were editing a goal about drinking less. Northstar has no analytics, no crash reporter, no advertising SDK and no attribution framework; the app makes no network requests, so there is nowhere for such a report to go.
It works everywhere, immediately
On a plane, in a basement, on a train through a tunnel, on the first launch after installing with the phone in airplane mode. No loading spinner, no "couldn't reach the server", and no first-run flow that stands between you and the app while you invent a password.
No account lifecycle to manage
No password to store, no verification email, no session that expires on a Tuesday, no password reset when you come back after three months, and no marketing mail. Deletion is a local operation rather than a request you file and then have to trust: in Northstar it is one action on the profile screen, behind two confirmations, that clears every table and every stored preference. There is no cloud copy to chase afterwards.
No permission prompts
An app that does nothing over the network and sends no notifications does not need to ask for anything. Northstar requests no permissions at all — no location, no notifications, no contacts, and no tracking prompt. If an app asks for something it plainly does not need, that is worth noticing regardless of what its policy says.
What you give up
This is the part that local-only apps tend to skip, so here it is in full.
No sync
Your goals are on one device. There is no iPad version of the same data, no web view, no phone-and-laptop workflow. If you genuinely work across devices, this is a real loss and no amount of privacy compensates for a tool you cannot reach.
No server-side backup
There is no copy on a server to restore from. What protects you instead is the operating system's own device backup — an encrypted iCloud or computer backup includes app data, so a restored phone brings the records back. That is a meaningful safety net, but it is one you have to have switched on, and it is worth checking rather than assuming.
Losing the phone can mean losing the data
Without a device backup, a lost or destroyed phone takes the records with it. This is the sharpest edge of the trade, and it is the honest counterweight to everything in the previous section.
No sharing, no accountability partner, no leaderboard
Social accountability helps some people a great deal. An app with no server cannot offer it. If a shared streak with a friend is what actually gets you out of the door, a local-only tool is the wrong choice and you should pick the one that works for you.
No cross-device history if you switch phones without a backup
Migrating to a new phone is a backup-restore operation rather than a login. It works, but it is a step you have to perform rather than one that happens because you typed a password.
How to check a privacy claim yourself
Every app in this category says it respects your privacy. The claim is cheap; here are ways to test it that do not require reading source code.
- Install it and turn on airplane mode before the first launch. An app that genuinely needs no server will work completely. One that stalls, shows a spinner, or refuses to get past a sign-in screen has told you what it needs.
- Look at what it asks for. An offline tool that requests tracking permission, or contacts, or location, is asking for something its stated function does not require.
- Check whether an account is mandatory. "Optional sign-in for sync" is a very different posture from "you cannot see the app until you register".
- Read the App Store privacy card, and specifically the "Data Linked to You" and "Data Used to Track You" sections. Any tracking entry means an advertising or attribution SDK is present, whatever the marketing copy says.
- Check how deletion works. If deleting your data means emailing support and waiting, the data is on a server. If it is a button in the app that takes effect immediately, it is local.
- On iOS, look at the app's cellular data usage in Settings after a week of real use. An app that makes no network requests will show essentially nothing.
One caveat worth stating
Local-only means the app sends nothing. It does not mean the data is inaccessible to anyone who has your unlocked phone. Device-level protection — a passcode, Face ID, and the disk encryption that gives you — is what actually guards it, and it is the operating system doing that work rather than the app. Northstar has no separate app-level lock in this version, so if a shared or unlocked phone is your threat model, the phone's own passcode is the control that matters.
Which one should you choose
Choose local-only if you use one device for this, if the content is the kind of thing you would not want on someone else's server, and if you have device backups switched on. That is a large fraction of people who track goals, and for them the trade is close to free.
Choose a synced, account-based app if you genuinely work across devices, if you want a web view, or if shared accountability is what makes you do the work. Those are real requirements and a local tool cannot meet them. The mistake is not choosing sync — it is accepting an account, a profile and a data-retention policy for an app you only ever open on one phone, because that was simply the default flow.
Frequently asked questions
Where is my data stored if there is no account?
In a database file inside the app on your phone, along with a few stored preferences. Nothing is transmitted, because the app makes no network requests at all.
What happens to my data if I lose my phone?
If you have an encrypted device backup — iCloud or a computer backup — restoring the phone restores the records. Without a device backup, the data is gone. This is the direct cost of there being no server copy.
Can I sync my goals to my iPad?
No. Everything lives on the one device, with no sync and no server-side backup. If working across devices matters to you, a local-only app is the wrong fit and it is better to know that up front.
How do I know an app really makes no network requests?
Turn on airplane mode before the first launch and use it normally — a genuinely offline app will work completely. Then check its cellular data usage in Settings after a week, and read the App Store privacy card for any "Data Used to Track You" entry.
Try it on a real goal
Northstar cuts a goal into phases and phases into steps you write yourself, then names one next action a day. Its statistics come from your own entries, and it shows an empty state rather than a placeholder number. Everything stays on the device — no account, no sync, no analytics, no notifications. Free, with no in-app purchases.