The Only iPhone Trip Tracker That Never Sees Your Data

Most mileage trackers upload every trip to their servers the moment you finish a drive. We think that's strange — so Drivio doesn't. Here's what that actually means, and why it's harder than it sounds.

What Most Trackers Actually Do

Install a typical mileage tracker and the first thing it asks for is your email. Then it wants you to create an account. Then it wants you to verify the account. Only then does it start tracking drives. And every drive, from that point on, gets uploaded to their servers — complete with GPS coordinates, timestamps, and whatever else they're collecting about your phone.

The reason is simple: their business model requires it. They sell trip logs to fleet managers, they do "driving insights" research, they need accounts because accounts are the unit of billing. So the architecture is server-first by default — your phone is just a dumb data collector.

That's a reasonable business, but it's not what we wanted to build. We wanted the opposite: a trip tracker where the company literally cannot see your data, because it never leaves your device.

What Apple Means by "Collect"

Apple has a specific, useful definition of data collection that they use in the App Store Privacy labels:

"Collect" means transmitting data off the device in a way that allows you or your third-party partners to access it for longer than the time necessary to service the transmitted request in real time.

Read that carefully. It's not "does the app read your data" — an app has to read data to do anything useful. It's "does the app send it somewhere where it sticks around."

Under that definition, Drivio collects nothing. Your trips are read from GPS, stored in a local database on your device, and that's it. Nothing leaves.

The Local-First Architecture

Here's what's actually happening when Drivio records a trip:

1. iOS wakes the app because of a Bluetooth connection, CarPlay event, or significant-change location.
2. The app confirms you're driving by checking motion activity.
3. GPS coordinates are streamed to a local Core Data database on your iPhone as you drive.
4. When the trip ends, the record is finalized — still entirely on your device.
5. When you open the app, you see your trip, rendered from that local database.

There is no step where data goes to Drivio's servers. In fact, we don't have servers that receive trip data. There's nothing listening. If you hacked us tomorrow, there would be no trip database to steal, because we don't have one.

"But What About iCloud Sync?"

iCloud sync, which is an optional Pro feature, is where this gets interesting. When it's on, your trips sync across your own devices — iPhone, iPad — through your personal iCloud account.

That data sits in your iCloud Private Database, which is a part of Apple's CloudKit designed specifically for this pattern. The developer (us) has no access to it. We can't read it. We can't enumerate it. We literally cannot see who is using iCloud sync, let alone what their trips look like. Apple engineered it that way on purpose.

So even with sync on, your data goes from your device to your iCloud — never to us.

No Account, No Email, No Login

One direct consequence of all this: we don't ask for an email. There's no sign-up flow. There's no "verify your account" step. You download the app, grant location and motion permissions, and drive. That's it.

Subscriptions work through Apple. When you buy Pro, Apple processes the payment and tells the app "this device has Pro." We never see your name, your email, your payment details, or your Apple ID. We just see that one of the iPhones using Drivio has Pro status — which is enough to unlock the Pro features on that device.

What You Give Up

Almost nothing. Because the product is built this way from the start, there's no practical feature cost:

• Automatic trip detection? Happens on-device.
• Trip history? Stored on-device.
• Journey curation, memory pins, photos? All on-device.
• Poster export? Rendered on-device.
• Cross-device sync? Via your iCloud, not ours.
• Live Share with family? Peer-to-peer invitation, ephemeral, no persistent server record.

The one thing you genuinely can't do: recover your trips if you lose your phone and never turned on iCloud backup. We can't help you because we don't have your trips. That's the trade.

Why This Matters

Your location history is some of the most sensitive data you generate. Where you sleep. Where you work. Where your kids go to school. Where you go when you're sick. Where you go when you're cheating or not cheating or interviewing or protesting.

The less of that any company has, the better — for you, and frankly for the company, which now doesn't have to worry about breaches, subpoenas, insider threats, or "we sold your data to an unnamed partner" disclosures. The strongest privacy guarantee is the one that doesn't depend on us being trustworthy. It's the one where we couldn't leak your data if we tried.

That's the bar we set for Drivio.