Last updated October 21, 2026
Bloodwork Ledger stores your lab results only in the app's storage on your own phone or computer. There are no accounts, and we keep no copy of your results on any server.
When you connect a health system, you sign in on that health system's own page. Bloodwork Ledger receives read-only access to your lab results and basic patient record, and the results go directly from the health system to your device. We don't receive or store your portal password or your results. Access is used once to download your results and is not kept.
When you ask the app to read a PDF, photo or pasted text, that report is sent once to Anthropic's Claude service to extract the values, and the extracted results are returned to your device. Our server passes the report through without storing or logging it. Files from a portal's "Download my record" option are read on your device and are never sent anywhere.
Without an invite code, a few free AI readings and explanations are available each day. To count them, the app keeps a random number on your device and sends it with AI requests. Our server stores it only as a one-way scrambled code together with your internet connection's scrambled address, for that day only, and deletes both after the day ends. It is never linked to your results or to the usage counts below.
You can keep records for someone else, such as a parent you care for, under People. Their results and medications are stored the same way as yours: only on your device and in your backups. Please keep their records with their permission.
A birth year can be saved for each person to show their age at each result. When you connect to MyChart, the app reads the patient's birth date to fill in the year if it's empty, and keeps only the year, on your device. The same applies to sex, which can be set for each person because labs use it for reference ranges.
Medicines you list under Medications are stored only on your device and in your backups. Your list is never sent to us or to any health system. The app matches it against a built-in list of medicine types to show which ones are known to affect a test.
Two things send information about a medicine, and only when you choose them. Adding medicines “From photo or list” sends that photo or text once to Anthropic's Claude to read the names and doses, the same way as a lab report; it isn't stored by us. Lab reports you import may also contain a medication list, which is read at the same time and shown to you before anything is added. And for a medicine without built-in information, the app can look it up by sending only its name.
“About this test” explanations for common tests are built into the app and work offline. For a test without a built-in explanation, the app can ask Anthropic's Claude for a general explanation. Only the test's name and category are sent, never your results, dates or any other information. The explanation is saved on your device so it's only looked up once.
Once a day, when the app is opened, it sends a short note that says only: the app was opened (and whether it's the first time on this device), how many results were added since the last note and by which route (reading a report, MyChart, a file, or typed in), how many explanations were looked up, and the app's language. The country is taken from the connection. The note has no name, account, device ID, test names, values or dates, so it can't be linked to you or to an earlier note. These totals help us see how many people use the app.
No advertising, no tracking across apps or websites, no cookies, and no selling or sharing of health information.
Because results live only on your device, deleting the app or clearing its data deletes them. Use "Save a backup" to keep a copy you control.
There are no accounts, so there is no account to close. To delete everything the app keeps on your device, use the menu (⋯) → Erase all data. To delete only your own results and medications and keep the records of someone you look after, open People, choose My profile and use "Erase my results and medications." The anonymous usage counts can't be linked to you, so there's nothing on our server to delete.
Bloodwork Ledger keeps a record of your results. Talk to your doctor about what they mean.
Questions: contact the person who shared the app with you.