Google は、健康とフィットネスに関するデータがユーザーにとって特に重要であることを認識しています。そのデータのセキュリティとプライバシーを確保することは何よりも重要です。このデータ交換中のセキュリティとプライバシーを保護するため、すべての Google Fit API スコープが制限されています。詳しくは、制限付き OAuth スコープへのアクセスのリクエストをご覧ください。
Google Fit REST API と Android API の承認済みのユースケースは何ですか？
Google Fit REST API と Android API の承認されているユースケースには、フィットネスとウェルネス、報酬、フィットネス コーチング、企業のウェルネス、医療、健康調査、ゲームなどがあります。Google Fit の REST API および Android API へのアクセスが許可されたアプリは、開示していない目的や許可されていない目的のためにその用途を広げることはできません。
Fit API にアクセスし、ユーザー数が 100 人を超える場合は、確認プロセスを開始するための連絡があります。リンクされた読み取り/書き込みヘルス スコープのいずれかに対する読み取り/書き込みアクセス権をリクエストする場合は、セキュリティ評価も実施する必要があります。これには、Android で Recording API と Sessions API を使用して歩数などのセンサーデータを読み取るケースが含まれます。
[[["わかりやすい","easyToUnderstand","thumb-up"],["問題の解決に役立った","solvedMyProblem","thumb-up"],["その他","otherUp","thumb-up"]],[["必要な情報がない","missingTheInformationINeed","thumb-down"],["複雑すぎる / 手順が多すぎる","tooComplicatedTooManySteps","thumb-down"],["最新ではない","outOfDate","thumb-down"],["翻訳に関する問題","translationIssue","thumb-down"],["サンプル / コードに問題がある","samplesCodeIssue","thumb-down"],["その他","otherDown","thumb-down"]],["最終更新日 2025-08-31 UTC。"],[[["\u003cp\u003eGoogle Fit API data is sensitive and protected; all scopes are restricted, requiring developers to follow verification steps.\u003c/p\u003e\n"],["\u003cp\u003eDevelopers must adhere to the Google Fit Developer and User Data Policy and address any gaps in their implementation.\u003c/p\u003e\n"],["\u003cp\u003eNew apps adding Google Fit scopes or existing apps with over 100 users will undergo a verification process, ensuring data security and user privacy.\u003c/p\u003e\n"],["\u003cp\u003eClear and prominent in-app disclosures are necessary, explaining data access, usage, and sharing practices related to Google Fit data.\u003c/p\u003e\n"],["\u003cp\u003eApps accessing specific read/write health scopes and exceeding the user threshold may require a security assessment to further enhance data protection.\u003c/p\u003e\n"]]],[],null,["# Verify your app for use with Google Fit API\n\nWe're conscious that health and fitness data is particularly sensitive to\nusers. Ensuring the security and privacy of that data is of utmost importance. To ensure security and privacy during the exchange of this data, all Google Fit API scopes are Restricted. Learn more about [requesting access to restricted OAuth scopes](https://support.google.com/cloud/answer/9110914#sensitive-restricted-scopes).\n\nWhat do you need to do?\n-----------------------\n\n- Read through the [Google Fit Developer and User Data Policy](/fit/policy)\n and address any gaps.\n\n- When you're going through the [OAuth verification process in the Google Cloud\n Platform console](https://console.cloud.google.com/apis/credentials/consent),\n follow the [appropriate verification\n steps](https://support.google.com/cloud/answer/9110914#ver-prep).\n\nWhen do you need to apply for verification?\n-------------------------------------------\n\n- **If you're adding a new Google Fit scope to your app** , follow the instructions to prepare for [restricted scope verification](https://support.google.com/cloud/answer/9110914#sensitive-restricted-scopes&zippy=%2Csteps-for-apps-requesting-sensitive-scopes).\n- **For existing apps**, wait until you're contacted by the Google team who will give you more information on the verification process and next steps. Until then, your app will continue to have access to the data and scopes it currently accesses.\n\nFAQs\n----\n\n### Which Google Fit APIs does the policy apply to?\n\n[The policy](/fit/policy) applies to both the REST and Android APIs.\n\n### What are the approved use cases for the Google Fit REST and Android APIs?\n\nApproved use cases for the Google Fit REST and Android APIs include fitness and wellness, rewards, fitness coaching, corporate wellness, medical care, health research, and games. Applications granted access to the Google Fit REST and Android APIs may not extend its use to undisclosed or non-permitted purposes.\n\n\u003cbr /\u003e\n\n|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| Approved use cases \u003cbr /\u003e |\n| **Fitness and Wellness** \u003cbr /\u003e Applications that allow users to track their fitness / wellness and progress to their goals using phone sensors, manual journalling or participating in digital classes and guided sessions. |\n| **Rewards** \u003cbr /\u003e Applications that encourage users to adopt and maintain healthy habits in exchange for financial rewards. |\n| **Fitness Coaching** \u003cbr /\u003e Applications that feature virtual human fitness coaching helping users to achieve a health or fitness goal. Human coaches have access to user data to check on progress and provide guidance and support. |\n| **Corporate Wellness** \u003cbr /\u003e Enterprise focused platforms that enable wellness managers to distribute and manage wellness programs for employees. |\n| **Medical Care** \u003cbr /\u003e Applications that help users receive and manage clinical care. These applications may provide services that exchange health and fitness data with clinical teams, such as condition management apps focused on medical conditions like diabetes or hypertension. |\n| **Health Research** \u003cbr /\u003e Applications give users the opportunity to donate their data for health research studies. These studies are typically approved by an Institutional Review Board (IRB) or Ethics Committee (EC) and collect user consent for conducting health research. |\n| **Games** \u003cbr /\u003e Applications where a user's progress in a game is influenced or impacted by their fitness and/or wellness. These are games that collect a user's activity data as a way to advance game play. |\n\n### What are the requirements for the in-app disclosure of data access, collection, use, and sharing?\n\nThe in-app disclosure:\n\n- Must be within the app itself, not only in the app description or on a website;\n- Must be displayed in the normal usage of the app and not require the user to navigate into a menu or settings;\n- Must describe the data being accessed or collected;\n- Must explain how the data will be used and/or shared;\n- Cannot only be placed in a privacy policy or terms of service; and\n- Cannot be included with other disclosures unrelated to Google Fit data collection.\n- Does not need explicit consent such as an \"accept\" or \"I understand\" granted by the user as this is done in the runtime prompt that immediately follows; enabling the user to close or swipe away are acceptable ways to migrate out of the disclosure.\n\nRecommended disclosure statement formats:\nTo meet the policy requirements, it's recommended that you reference the following example format:\n\"(This app) collects health and fitness data to enable (\"feature\"), (\"feature\"), \\& (\"feature\").\"\n\nExample: *\"Fitness Coach collects activity data to enable analytics and personalized coaching.\"*\n\nThe prominent disclosure may include other information to ensure compliance to policy requirements and clarity for users but must at least include the above, where relevant.\n\n### What do the review enhancements mean in practice?\n\nIf you access Fit APIs and have more than 100 users, you will be contacted in\ndue course to begin a verification process. If you request read/write access to\nany of the linked\n[read/write health scopes](https://support.google.com/cloud/answer/9110914#sensitive-restricted-scopes),\nyou will also be required to carry out a security assessment. This includes\ncases where you are reading sensor data, such as steps, using the Recording API\nand Sessions APIs on Android.\n\n### How can I check whether I have 100 or more users?\n\nYou can look that up for your project in [Cloud Console](https://console.cloud.google.com/apis/credentials/consent).\n\n### How will I be informed that I need to go through verification?\n\nYou will be contacted via the [contact email addresses that you have stored in\nCloud Console](https://console.cloud.google.com/iam-admin/essential-contacts),\nso please make sure these are kept up to date.\n\n### How do I determine if my app needs a security assessment?\n\nIf your app uses any of the linked\n[read/write health scopes](https://support.google.com/cloud/answer/9110914?#zippy=%2Cwhat-are-restricted-api-scopes),\nand has exceeded the 100-user cap then it will need a security assessment.\nYou will be separately informed that you need to go through verification and\nsecurity assessment, and will be given ample notice to complete it. For more\ninformation about the security standards used, see\n[App Defense Alliance security assessment FAQ](https://appdefensealliance.dev/casa).\n\n### How do I get a security assessment if my app needs one?\n\nWhen you are invited to go through verification, you will be provided with\ndetails of how to get a security assessment with ample notice to complete it."]]
