Home › Privacy
Privacy

What leaves the phone, and what does not

Specific rather than reassuring. Below is what the app actually does, including the one thing that does get transmitted.

The short version

Your NAS data never leaves your control

DataWhere it goes
Everything your NAS reports - system readings, storage, network, containers, packages, logs, users, tasksPhone to NAS, directly. No server of ours in the path.
Your files, photos and camera streamsPhone to NAS, directly, over whichever route you configured.
Your DSM username, password and 2FA device tokenThe device keychain or keystore. Never transmitted anywhere but to your NAS, to sign in.
Your assistant questions and their answersNowhere. Handled by a model on the device.
App settings - theme, layout, polling, unitsThe device, unless you export them yourself.
Crash reportsFirebase Crashlytics. The one thing that leaves. See below.
No middle

There is no MiyaraHub server between you and your NAS

This is architectural rather than a policy. Syno Manager is a client that speaks DSM's own API - the same one DSM's web interface calls - directly from your phone to your DiskStation.

Credentials

Where your password lives

The exception

Crash reports

The app includes Firebase Crashlytics, and it is enabled. When the app crashes, a diagnostic report is sent so the crash can be found and fixed.

What a crash report contains

  • The stack trace - which code failed, and where.
  • The device model and operating system version.
  • The app version and build number.

What it does not contain

  • Your NAS's address, name or configuration.
  • Your DSM username, password or tokens.
  • Your files, photos, camera footage or logs.
  • Anything you asked the assistant.
Why it is here at all: a crash that nobody can see is a crash that does not get fixed. The trade is a stack trace in exchange for the bug being found - and it is named here rather than buried, because a privacy page that quietly omits the one thing that transmits is not a privacy page.
The assistant

Enforced by the build, not by a promise

The on-device assistant uses a model that is already on your phone. Your question, your NAS's data and the answer never leave the device, and it works with the network switched off.

The part worth stating plainly: this is not a policy anyone has to remember. A check in the app's build fails if a cloud host, a cloud SDK or an API key appears anywhere in the assistant's code. The guarantee is structural.

Permissions

What the app asks for, and why

PermissionWhy
Local network (iOS)To reach a NAS at an address on your own network. Without it, iOS silently blocks the connection.
Photo libraryOnly when you pick a file to send to your NAS. The app declares this on iOS and macOS and does not touch the library otherwise.
MicrophoneOnly for voice input in the assistant, and only if you use it. A device without a microphone is fully supported - the feature is simply absent.
NotificationsOptional, for the app's own alerts.
The formal document

The full policy

This page explains how the app behaves. The formal privacy policy for MiyaraHub Technologies applications is the canonical document, and the app links to it from About.

Read the full privacy policy

Common questions

Privacy FAQ

Does Syno Manager send my NAS data anywhere?
No. Your phone connects to your NAS directly. There is no MiyaraHub server in that path, so your files, photos, camera footage, logs, usage figures and configuration never reach us or anybody else.
Does anything leave my phone at all?
One thing: crash reports, through Firebase Crashlytics - the stack trace, the device model and the app version. It does not carry your NAS's data, your credentials or your files.
Where are my NAS credentials stored?
In the platform's secure storage - the Keychain on iOS, the Keystore-backed store on Android - never in plain text, and explicitly excluded from Android cloud backup and device transfer.
Does the assistant send my questions to a server?
No. It runs a model already on your device and works with the network off. The app's build fails if a cloud host, SDK or API key appears anywhere in the assistant.
Are there ads or trackers?
There are no ads, no subscriptions and no in-app purchases in the app.

Questions about any of this?

Ask in the tracker - it is public, so the answer helps the next person too.

Open an issue