"You are not the product" has been printed on enough landing pages to stop meaning anything. It is a claim about a business model, and business models leave evidence. You do not have to trust the sentence. You can check it.
The only difference that matters
An ad-funded app has one customer, and it is not you. Advertisers pay for precision, and precision requires knowledge: who you are, what you want, who you know, where you go, what you linger on. The product improves as that knowledge deepens. Growth pressure and privacy pressure point in opposite directions, permanently, no matter how sincere the people building it are.
A subscription or paid-access app has a different problem. It needs you to keep paying, which means the incentive is to make the thing good. Collecting more data than the app needs adds legal risk, storage cost, and breach exposure with no revenue upside. Restraint is the cheaper option.
That is the whole difference. Everything below is just how to detect which one you are holding.
Signals it is treating you as the product
- Personalized ads anywhere in the app. Not a signal to interpret. A statement of fact about the revenue model.
- An interest or topic list in settings. If you can find a screen showing inferred categories about you, an inference engine exists and it is running on your behavior.
- A third-party SDK list in the privacy policy. Analytics, attribution, and ad SDKs are code from other companies running inside the app you trusted. Count them.
- The word "partners." Specifically "we may share information with our partners" or "affiliates." That clause exists to make sharing lawful. It would not be drafted if nothing were shared.
- Free, forever, with no visible way to pay. Somebody is paying. If no purchase surface exists anywhere in the product, work out who.
- A privacy policy that takes twenty minutes to read. Length is a proxy for how many parties are involved.
Signals it is not
- No ad SDK and no ad surface, which you can verify by looking at the app's own privacy disclosures in the App Store listing.
- No interest graph, no inferred-topics screen, nothing to opt out of because nothing is being inferred.
- No "partners may use your data" clause, and named subprocessors rather than a vague category.
- A policy you can read in under five minutes, because there is less to disclose.
- A price. An app that charges has a reason to be on your side.
What Orbit collects, and why
Because we are asking you to check other apps, here is ours in plain terms.
We collect an account identity, which is an email address and a username, because an account has to exist for an invite-only network to work. We store what you post inside your orbits, because storing it is the feature. We store the minimum operational records needed to run the service, such as sign-in events for security and device tokens if you turn on notifications.
That is the list. No ad SDKs. No interest categories. No behavioral profile, no data sold, ever, to anyone. Messages are on your terms: you decide who can start a conversation with you, and only the people in it can see it. We do not use private Messages for advertising, profiling, sale, cross-app tracking, or training AI models. Photo metadata is stripped on upload, so location data baked into a camera file does not travel with the image.
Orbit is paid, which is the boring reason all of the above is possible. We have written about why it costs what it costs, and the privacy policy is short enough to actually read. If you want to see the mechanisms rather than the promises, how Orbit protects you is the technical walkthrough.
Related reading: your kids' photos don't belong on a stranger's feed applies these tests to family sharing specifically.