The short answer: The apps public privacy reviews keep naming for on-phone storage are Drip, Euki and Periodical. Consumer Reports recommended those three because they store data locally and do not allow third-party tracking. Mori is built to the same default: no account, records on the device, no ads or analytics SDKs in the app. “Doesn’t sell my info” is not one switch. It depends on where the timeline lives, whether an account exists, and whether a backup can be decrypted.

What “on your phone” has to mean

Three separate facts get collapsed into one slogan. A useful answer checks each of them:

Local storage is also not a medical result and not contraception. Estimates of ovulation or a fertile window — including Mori’s — are labels on your history, not a test.

Apps with a published local-storage design

What their own pages or a named review sayAccountBackup
Drip Privacy policy: no collection, retention or sharing of usage data or personal information; menstrual health data stored only on the device; no ads. Open source (GPL-3.0-only on F-Droid) None described Import, export and a password (F-Droid). No drip-operated cloud. OS backup can still copy the file
Euki Free nonprofit app, on-device only, no cloud sync. Compared in detail on Euki vs Mori None No sync. A new phone means re-entry unless you have your own copy
Periodical Named by Consumer Reports, with Drip and Euki, as storing data locally and not allowing third-party tracking. This site has not published a Periodical comparison, so that is the only claim repeated here Not reviewed here Not reviewed here
Mori Records stay on the phone unless you enable sync. No ads and no analytics SDKs in the app. Core features free. Android signed APK; iOS in progress None until you opt into sync, which then needs an email JSON / CSV / readable export. Optional sync (US$3.99 once) uploads ciphertext plus a wrapped recovery key — not end-to-end, not zero-knowledge

A 2026 All About Cookies roundup also highlights Drip, Euki and Periodical for local storage. That article is a second pointer to the same trio, not an extra set of product facts.

The other pattern: an account, then a server

Most well-known trackers start by creating an account and keeping the history on their servers. A policy can still say they do not sell it. The readable copy exists either way. Our sourced comparisons:

Where Mori fits, without calling it the winner

Mori belongs in the local-storage group on its default settings, next to Drip and Euki, not next to Flo. It was not part of the Consumer Reports review, and it is not open source, so you cannot audit the binary the way you can audit Drip. What it adds, and what those two do not, is a paid encrypted backup and confidence-labelled calendar estimates in English and Simplified Chinese.

Turn sync on and the picture changes on purpose. The snapshot is encrypted on the phone before upload. The server also holds the wrapped key used for account recovery. Anyone evaluating “the company can never read this” should stop at that sentence and read the privacy policy and pricing.md. If you want the strict no-server version, leave sync off — logging, calendar, estimates, export and deletion still work offline. That path is spelled out on privacy-first tracking and no-account tracking.

How to choose without a ranked list

FAQ

Which period tracker keeps data on your phone?

Consumer Reports recommended Drip, Euki and Periodical because they store data locally and do not allow third-party tracking. Drip’s own privacy policy says menstrual health data stays on the device. Euki is built with no cloud sync. Mori also keeps records on the phone by default, with no account, and only uploads an encrypted snapshot if you turn sync on. Local storage is not the same as a promise that nobody can ever read a backup.

Does “doesn’t sell my info” mean the company cannot read my cycle?

Not by itself. An app can avoid selling data and still hold an account copy on its servers. The stronger question is whether a readable health timeline exists off your phone. Drip and Euki are designed so the company has no cycle database. Mori has no cycle database unless you enable sync, and even then the server stores ciphertext plus a wrapped recovery key — not end-to-end encryption and not zero-knowledge.

Can my phone still upload local period data?

Yes, through the operating system. Drip’s privacy policy warns that an automatic device cloud backup can copy local app data even though drip itself does not. Mori’s privacy page states the same kind of limit for OS backups. Check the phone’s backup settings if you need the file to stay on the device.

Sources

← All comparisons · Privacy-first tracking · Mori home