Check the obvious promises
Look for a privacy policy that names categories of data, processors, retention, sync, support access, and deletion. Vague claims are a signal to keep reading.
Test offline behavior
Airplane mode is a useful product test. Some features should continue, while public data, payments, or server-side collaboration may stop for clear reasons.
Ask about AI routing
For AI features, the privacy-critical question is whether prompts and source records stay on device, go directly to a provider, or pass through the app maker's server.