Articles/Privacy

Where an app's iCloud data really lives

Updated 13 October 2026. 3 minute read.

"Syncs with iCloud" appears in the description of many apps. It sounds like a feature, and it is also a statement about where your data is kept and who is able to look at it. The answer is more reassuring than most people assume.

Two ways an app can sync

The developer runs a server. Your data is sent to the company that makes the app and stored in their database. You need an account with them. They are responsible for securing it, and they are able to access it.

The app uses your iCloud. Apple offers developers a service, CloudKit, that stores an app's data inside the user's own iCloud account. The developer writes the app. Apple runs the storage. The data belongs to the Apple Account of the person using the app.

What "private database" means

CloudKit has different kinds of storage. The one that matters here is the private database. Each user has their own, per app. Data in it:

• is stored under your Apple Account,
• counts against your iCloud storage, not the developer's,
• is reachable only by you, signed in on your devices.

The developer has no way to open another person's private database. There is no admin view that lists users' content. This is a property of how the service is built, not a promise in a policy.

What that means in practice

• No separate account. If you are signed in to iCloud on the device, sync works.
• Nothing for the developer to leak. They do not hold your data.
• It outlives the app. Your data is in your iCloud and on your devices whether or not the developer is still around.
• It uses your storage. Large files count towards your iCloud plan.
• You control it from the system's settings, where you can see how much space each app uses and delete its data.

Sharing

Some apps let you share part of your data with another person through iCloud. In that case the shared items stay in the owner's iCloud and become visible to the people invited. Apple handles the invitation and the access. The developer still has no access to the content.

How Stashy uses it

Stashy keeps your library in two places: on your device, and in your private iCloud database if you are signed in. That is how a save made on your iPhone is already there on your iPad and Mac. There is no Stashy account and no Stashy server.

If you are not signed in to iCloud, the library simply stays on that device.

Things worth knowing

• Sync needs iCloud to be on for the app. If saves do not appear on another device, check that both are signed in to the same Apple Account.
• Deleting the app does not delete iCloud data. To remove it, open your Apple Account in Settings, go to iCloud storage, choose the app and delete its data.
• An export is still a good idea. iCloud is sync, not a backup you can browse. A file you control is the real safety net. See exporting from Stashy.

Questions to ask of any app

1. Is my data on your server or in my iCloud?
2. Do I need an account with you?
3. Can I export everything?

The answers tell you most of what you need to know. See also apps without accounts.