pillGOAT
Privacy Policy
Last updated 20 August 2026 · Skiff Labs LLC
The short version
- pillGOAT has no accounts and no servers. There is nothing to sign up for.
- Your medications, doses, and symptoms are stored on your device. If you turn on iCloud sync, they sync through your own private iCloud account, which we cannot access.
- We do not use analytics, advertising, or tracking of any kind. No third-party code in the app sends your data anywhere.
- We never see your medication data, and we never sell or share it, because we never receive it.
- Some things do leave your device: drug name lookups go to a US government database, and pharmacy searches go to Apple Maps. Details below.
This policy explains what pillGOAT does with information when you use it. pillGOAT is made by Skiff Labs LLC. Throughout this policy, "we" and "us" mean Skiff Labs LLC, and "the app" means pillGOAT.
What the app stores, and where
pillGOAT keeps your information on your device using Apple's on-device database. If you are signed in to iCloud and have iCloud sync enabled for the app, that information also syncs to your own private iCloud database so it can appear on your other devices. Apple provides that storage to you as part of your iCloud account. We have no access to it, no ability to read it, and no copy of it.
The information the app stores includes:
- Medications you add, including name, strength, dose form, appearance, and supply counts
- Schedules and reminder times
- Dose records: when a dose was taken, skipped, or missed, and for injectable medications, the injection site you recorded
- Side effects you log, including symptom, severity, and notes
- Pharmacies you save, including name, address, phone number, and, if you selected the pharmacy from a map, its coordinates
- Profiles, if you track medications for more than one person, including the name you give each profile
- An optional patient name and date of birth, used only to label exported PDF reports for your clinic
- Your app settings, such as whether Face ID is required and how much detail reminders show
The app also writes small files on your device so the Apple Watch app and the home screen widgets can show your upcoming doses. These files live in a shared storage area that only pillGOAT and its own extensions can read, and they are protected by your device passcode. If you have set reminders to hide medication names, the names are removed from these files too.
While you are adding a medication, the app saves your in-progress entry so you do not lose your work if you leave the screen. That saved entry is stored on your device with the strongest file protection iOS offers, and it is deleted when you finish or cancel.
What leaves your device
pillGOAT is not an offline-only app, and we would rather be specific than reassuring. Here is everything the app sends out, and to whom.
| Goes to | What is sent | When |
|---|---|---|
| RxNorm, US National Library of Medicine | The drug name text you are searching for | When you search for a medication by name |
| DailyMed, US National Library of Medicine | An identifier for the medication you selected | After you save a medication, to fetch its official label text |
| Apple Maps | Your pharmacy search text, and your approximate location if you allowed it | When you search for a pharmacy or ask for directions |
| Apple (iCloud) | Your app data, encrypted, into your own private iCloud database | Continuously, if iCloud sync is on |
| Apple (App Store) | Your purchase and subscription status | When you subscribe, restore a purchase, or the app checks whether your subscription is active |
The two National Library of Medicine services are public US government drug databases. We send them a drug name or a drug identifier. We do not send your name, your other medications, your dose history, or anything that identifies you or your device beyond what any internet request necessarily reveals. Those services have their own privacy practices, which we do not control.
Location
The app asks for location access only to find pharmacies near you, and only while you are using it. It requests approximate location, not precise location, because a pharmacy search does not need to know exactly where you are standing. You can decline, and pharmacy search still works if you type a name or address.
If you save a pharmacy you found on the map, its coordinates are stored with that pharmacy so the app can show it on a map later. Your own location is never stored and never sent to us.
Reports you export
The PDF report is created on your device. Nothing is uploaded. Where it goes afterwards is entirely your choice — you decide whether to print it, email it, or save it. Once you share it, this policy no longer governs it, and the privacy practices of whatever you shared it with apply instead.
What we do not do
- We do not use analytics or product measurement tools of any kind.
- We do not use advertising, and there are no ads in the app.
- We do not track you across apps or websites, and the app does not ask for permission to do so.
- We do not sell, rent, or share your personal information. We could not, because we do not have it.
- The app contains one piece of third-party code, an animation library, and it makes no network requests.
- The app does not read from or write to Apple Health.
Crash reports
If you have turned on "Share With App Developers" in iOS Settings under Privacy & Security → Analytics & Improvements, Apple may send us reports when the app crashes. These reports come from Apple, describe what the software was doing when it failed, and contain no medication data and nothing that identifies you. This is an iOS-wide setting you control, and you can turn it off at any time. We use these reports only to fix crashes.
Face ID and passcode
If you turn on the app lock, unlocking uses Face ID, Touch ID, or your device passcode. This happens entirely through iOS. The app is told only whether the unlock succeeded. We never receive your biometric data, and neither does the app — Apple does not make it available.
Keeping information safe
Your data is protected by your device's encryption and passcode. Files the app writes are marked so that iOS keeps them encrypted when your device is locked. iCloud sync is encrypted in transit and at rest by Apple. Turning on the app lock adds a further barrier if someone else has your unlocked device.
No method of storing or transmitting information is completely secure, and we cannot guarantee absolute security.
Children
pillGOAT is not directed to children, and we do not knowingly collect information from children. An adult may of course use the app to track medications for a child in their care; in that case the information is the adult's own record, stored on the adult's device, and this policy applies to it in the same way.
Your choices, and deleting your data
Because your data lives on your device and in your own iCloud account, you control it directly:
- Delete individual items — remove a medication, dose, side effect, pharmacy, or profile in the app.
- Delete everything — deleting the app removes its data from that device. If iCloud sync is on, data will still be present on your other devices and in your iCloud account.
- Delete the iCloud copy — in iOS Settings, open your name, then iCloud, then Manage Account Storage, and remove pillGOAT's data.
- Turn off location access — in iOS Settings under pillGOAT, at any time.
- Turn off crash sharing — in iOS Settings under Privacy & Security → Analytics & Improvements.
We do not hold your medication data, so there is nothing for us to delete on your behalf and no request you need to send us to have it removed.
Depending on where you live, you may have rights to access, correct, delete, or port personal information a company holds about you, or to object to its processing. If you would like to exercise any of these rights, write to us at the address below. In most cases the answer will be that we hold nothing about you — but we will tell you that plainly and confirm it.
Changes to this policy
If we change how the app handles information, we will update this page and change the date at the top. Material changes will also be noted in the app. Continuing to use pillGOAT after a change means the updated policy applies.
Contact
Questions about privacy, or about this policy, can go to privacy@skifflabs.xyz. A person reads that address, and we aim to reply within a few days.