Start with separation
Health data should not drift into systems that do not need it. StepIsland’s architecture keeps HealthKit-derived step information in the app’s on-device experience and rejects health, step, workout, medical and precise-location properties from website analytics events.
Accounts are a different lane
If a product account is used for social or entitlement features, identity data should remain separate from the HealthKit processing path. That makes the boundary easier to explain and easier to audit.
Marketing is separate again
Joining Upmoat product updates requires an explicit marketing opt-in. Website analytics are also optional and use their own consent choice. Neither permission is a reason to collect HealthKit-derived step data.