Quoting the docs:
https://developer.apple.com/documentation/uikit/core_app/protecting_the_user_s_privacy
Respect the user’s preferences, and take reasonable steps to protect the data that you collect in your apps:
Provide settings that allow the user to disable access to sensitive information. The operating system does this automatically for protected system resources—like location, contacts, and health data*—through the Privacy menu of the Settings app. Extend this behavior to any data you cache from these sources or collect directly. For example, if your users build a social media profile containing personal information, offer them a way to delete the data (including any server copies you have).
* Protecting User Privacy
HealthKit temporarily caches the data and saves it to the encrypted store as soon as the phone is unlocked.
Top level, see: https://developer.apple.com/documentation/security