Specific rather than reassuring. Below is what the app actually does, including the one thing that does get transmitted.
| Data | Where it goes |
|---|---|
| Everything your NAS reports - system readings, storage, network, containers, packages, logs, users, tasks | Phone to NAS, directly. No server of ours in the path. |
| Your files, photos and camera streams | Phone to NAS, directly, over whichever route you configured. |
| Your DSM username, password and 2FA device token | The device keychain or keystore. Never transmitted anywhere but to your NAS, to sign in. |
| Your assistant questions and their answers | Nowhere. Handled by a model on the device. |
| App settings - theme, layout, polling, units | The device, unless you export them yourself. |
| Crash reports | Firebase Crashlytics. The one thing that leaves. See below. |
This is architectural rather than a policy. Syno Manager is a client that speaks DSM's own API - the same one DSM's web interface calls - directly from your phone to your DiskStation.
The app includes Firebase Crashlytics, and it is enabled. When the app crashes, a diagnostic report is sent so the crash can be found and fixed.
The on-device assistant uses a model that is already on your phone. Your question, your NAS's data and the answer never leave the device, and it works with the network switched off.
The part worth stating plainly: this is not a policy anyone has to remember. A check in the app's build fails if a cloud host, a cloud SDK or an API key appears anywhere in the assistant's code. The guarantee is structural.
| Permission | Why |
|---|---|
| Local network (iOS) | To reach a NAS at an address on your own network. Without it, iOS silently blocks the connection. |
| Photo library | Only when you pick a file to send to your NAS. The app declares this on iOS and macOS and does not touch the library otherwise. |
| Microphone | Only for voice input in the assistant, and only if you use it. A device without a microphone is fully supported - the feature is simply absent. |
| Notifications | Optional, for the app's own alerts. |
This page explains how the app behaves. The formal privacy policy for MiyaraHub Technologies applications is the canonical document, and the app links to it from About.
Ask in the tracker - it is public, so the answer helps the next person too.