RECALL LIST

PRIVACY

Recall List has no account and does not ask for an email address. It does not send SMS.

INSTALL ID

The app creates an install id on the phone and stores it in local app storage. The API uses that id to count the three daily checks and to keep a watchlist. Reinstalling the app creates a new id. The daily quota starts over. The previous id is no longer used by the phone.

WHAT THE SERVER STORES

• The install id and how many checks it has used on the current UTC day.
• Watchlist product names, whether push is on for each row, and the last outcome.
• The Apple push token for this install, if you allow notifications.

On Cloud Run the store is Firestore in the Recall List Google Cloud project. A local run can use SQLite or memory instead. Firebase Hosting serves only these legal pages.

APPLE

The watchlist is an auto-renewable subscription billed by Apple. Recall List does not receive your Apple ID email. Purchase records stay with Apple. The app asks RevenueCat whether the Watchlist entitlement is active. That check uses an anonymous app user id. No email is sent to RevenueCat.

FDA

A check sends the product name to the Recall List API, which queries openFDA and, if openFDA rate-limits, the FDA recall RSS. Those requests go to the FDA. If you use the camera, it reads a product name, and a barcode if one is in the frame, on the phone. The photo and the barcode are not sent. Recall List does not sell this data and does not run ads.

PUSH

Alerts are iOS push only, and only for watchlist rows you leave on. There is no email list and no text-message list.

Not medical or legal advice. Always confirm on FDA.gov.