Data Report Card · Obsidian
Obsidian Data Report Card
Notes · local Markdown
Data
Practices
Practices
2Access2Portability2Friction2Deletion2Sells2Trains AI
=
A
12/12
Agent
Readiness
Readiness
2Access
2Portability
1API access
=
B
5/6
Agent Readiness is a derived signal — a synthesis of two existing cells (Access, Portability) plus one sourced factor (API access), not an independently measured grade. API access scale: Best (2) consumer-grantable API · Moderate (1) partial / encumbered · Restrictive (0) manual export only. What is Agent Readiness?
Reviewed Jun 2026 · policies are checked weekly for changes · stated — every cell is read from Obsidian's published policy; none has been tested (run by us) yet.
2Accessstated
Obsidian collects no personal data or telemetry; your notes are local Markdown files you fully hold, any server-side Sync/Publish data is end-to-end encrypted, and account data is self-serve in the obsidian.md account dashboard.
Obsidian — Privacy Policy · accessed Jun 2026 ↗2Portabilitystated
Your notes are plain-text Markdown files in a local folder — an open, universal, machine-readable format you already possess, with no export step and nothing locked in.
Obsidian — Privacy Policy · accessed Jun 2026 ↗2Frictionstated
No account is required to use the app; accessing, moving or deleting your notes is ordinary file management, and account/Sync are self-serve via the dashboard — no email, no waiting, no verification.
Obsidian — Privacy Policy · accessed Jun 2026 ↗2Deletionstated
You delete local notes directly; account deletion is self-serve and permanent via the account dashboard, and Sync data is deleted immediately when you cancel (one month if the subscription lapses).
Obsidian — Privacy Policy · accessed Jun 2026 ↗2Sells / sharesstated
"We do not collect any personal data"; the only sharing is your email with payment processors, never for advertising or resale.
Obsidian — Privacy Policy · accessed Jun 2026 ↗2Trains AIstated
Obsidian ships no AI features that use your notes, and because your data stays local it is never available to train models.
Obsidian — Privacy Policy · accessed Jun 2026 ↗1API access — feeds Agent Readiness, not the /12stated
Obsidian exposes no hosted/OAuth API for a remote agent to connect to your data, but your notes are open Markdown files on disk and Obsidian ships a documented local plugin API, so an on-device agent has full read/write access — accessible locally, not remotely.
Obsidian — Developer docs (local plugin API) · accessed Jul 2026 ↗Source-verified Jul 2026 from Obsidian’s own privacy policy. All cells are "stated" (read from published policy); no live export or deletion has been run to mark any cell "tested."
How to request your data from Obsidian
- Go to https://obsidian.md/account — Obsidian's data-request entry point.
- Your notes are local Markdown files in your vault folder; account/Sync data via obsidian.md/account.
- Expected wait: notes are already local files (no request needed); account deletion self-serve and immediate via obsidian.md/account — Obsidian's stated turnaround (we haven't independently timed a request yet).
These steps reflect Obsidian's documented process as of Jun 2026. The wait time is the company's stated figure, not yet independently measured by us.