Google Health API scopes: every scope and the data it covers
Read from Google’s documentation on 2026-10-17 · discovery document revision 20261014 · Google’s Scopes page last updated 2026-10-09
Google’s Scopes page documents 18 scopes across 12 families, every one beginning https://www.googleapis.com/auth/googlehealth. The v4 discovery document defines 20 googlehealth scopes; 3 of them (.reproductive_health.readonly, .logged_symptoms.readonly and .mindfulness.readonly) are not on the Scopes page, and the page’s .nutrition.readonly is not in the discovery document. The table below gives each documented scope with the data types whose row in Google’s data-types table lists it.
The 18 documented scopes
In the Scopes page’s order, with its consent text verbatim. “Data types” are the types whose row in Google’s data-types table lists the scope.
| Scope | Google’s permission text | Data types |
|---|---|---|
.activity_and_fitness.readonlyhttps://www.googleapis.com/auth/googlehealth.activity_and_fitness.readonly | See your Google Health activity and fitness data. | active-energy-burned, active-minutes, active-zone-minutes, activity-level, altitude, calories-in-heart-rate-zone, daily-vo2-max, distance, exercise, floors, run-vo2-max, sedentary-period, steps, swim-lengths-data, time-in-heart-rate-zone, total-calories, vo2-max |
.activity_and_fitness.writeonlyhttps://www.googleapis.com/auth/googlehealth.activity_and_fitness.writeonly | Add activity and fitness data to Google Health, and edit or delete the data it adds. | active-energy-burned, active-minutes, active-zone-minutes, activity-level, altitude, calories-in-heart-rate-zone, daily-vo2-max, distance, exercise, floors, run-vo2-max, sedentary-period, steps, swim-lengths-data, time-in-heart-rate-zone, total-calories, vo2-max |
.ecg.readonlyhttps://www.googleapis.com/auth/googlehealth.ecg.readonly | See your Google Health ECG data. | electrocardiogram |
.health_metrics_and_measurements.readonlyhttps://www.googleapis.com/auth/googlehealth.health_metrics_and_measurements.readonly | See your Google Health health metrics and measurement data. | blood-glucose, body-fat, core-body-temperature, daily-heart-rate-variability, daily-heart-rate-zones, daily-oxygen-saturation, daily-respiratory-rate, daily-resting-heart-rate, daily-sleep-temperature-derivations, heart-rate, heart-rate-variability, height, oxygen-saturation, respiratory-rate-sleep-summary, skin-temperature-sensors, weight |
.health_metrics_and_measurements.writeonlyhttps://www.googleapis.com/auth/googlehealth.health_metrics_and_measurements.writeonly | Add health metric and measurements data to Google Health, and edit or delete the data it adds. | blood-glucose, body-fat, core-body-temperature, daily-heart-rate-variability, daily-heart-rate-zones, daily-oxygen-saturation, daily-respiratory-rate, daily-resting-heart-rate, daily-sleep-temperature-derivations, heart-rate, heart-rate-variability, height, oxygen-saturation, respiratory-rate-sleep-summary, skin-temperature-sensors, weight |
.irn.readonlyhttps://www.googleapis.com/auth/googlehealth.irn.readonly | See your Google Health Irregular Rhythm Notifications data. | irregular-rhythm-notification |
.location.readonlyhttps://www.googleapis.com/auth/googlehealth.location.readonly | See your Google Health GPS location recorded during an exercise. | none in the data-types table |
.logged_symptoms.writeonlyhttps://www.googleapis.com/auth/googlehealth.logged_symptoms.writeonly | Add logged symptoms data to Google Health, and edit or delete the data it adds. | symptoms |
.mindfulness.writeonlyhttps://www.googleapis.com/auth/googlehealth.mindfulness.writeonly | Add mindfulness data to Google Health, and edit or delete the data it adds. | moods |
.nutrition.readonlyhttps://www.googleapis.com/auth/googlehealth.nutrition.readonlynot in the v4 discovery document | See your Google Health nutrition data. | food, food-measurement-unit, hydration-log, nutrition-log |
.nutrition.writeonlyhttps://www.googleapis.com/auth/googlehealth.nutrition.writeonly | Add nutrition data to Google Health, and edit or delete the data it adds. | food, food-measurement-unit, hydration-log, nutrition-log |
.profile.readonlyhttps://www.googleapis.com/auth/googlehealth.profile.readonly | See your Google Health profile data. | none in the data-types table |
.profile.writeonlyhttps://www.googleapis.com/auth/googlehealth.profile.writeonly | Add profile data to Google Health, and edit or delete the data it adds. | none in the data-types table |
.reproductive_health.writeonlyhttps://www.googleapis.com/auth/googlehealth.reproductive_health.writeonly | Add reproductive health data to Google Health, and edit or delete the data it adds. | menstrual-period, ovulation-test |
.settings.readonlyhttps://www.googleapis.com/auth/googlehealth.settings.readonly | See your Google Health settings. | none in the data-types table |
.settings.writeonlyhttps://www.googleapis.com/auth/googlehealth.settings.writeonly | Add settings data to Google Health, and edit or delete the data it adds. | none in the data-types table |
.sleep.readonlyhttps://www.googleapis.com/auth/googlehealth.sleep.readonly | See your Google Health sleep data. | sleep |
.sleep.writeonlyhttps://www.googleapis.com/auth/googlehealth.sleep.writeonly | Add sleep data to Google Health, and edit or delete the data it adds. | sleep |
Google’s Scopes page: “All Google Health API scopes begin with: https://www.googleapis.com/auth/googlehealth”
Scopes only the discovery document defines
The v4 discovery document (read 2026-10-17) defines these, with its own consent text; Google’s Scopes page does not list them.
| Scope | Discovery document description |
|---|---|
.reproductive_health.readonlyhttps://www.googleapis.com/auth/googlehealth.reproductive_health.readonly | See your Google Health reproductive health data |
.logged_symptoms.readonlyhttps://www.googleapis.com/auth/googlehealth.logged_symptoms.readonly | See your Google Health logged symptoms data |
.mindfulness.readonlyhttps://www.googleapis.com/auth/googlehealth.mindfulness.readonly | See your Google Health mindfulness data |
The discovery document also defines https://www.googleapis.com/auth/cloud-platform (“See, edit, configure, and delete your Google Cloud data and see the email address for your Google Account.”), which it lists on 8 methods: projects.subscribers.create, projects.subscribers.delete, projects.subscribers.list, projects.subscribers.patch, projects.subscribers.subscriptions.create, projects.subscribers.subscriptions.delete, projects.subscribers.subscriptions.list and projects.subscribers.subscriptions.patch.
Where Google’s pages disagree about scopes
Scope missing from the Scopes page
The v4 discovery document defines .reproductive_health.readonly ("See your Google Health reproductive health data"); the Scopes page does not list it.
- the v4 discovery document: “https://www.googleapis.com/auth/googlehealth.reproductive_health.readonly”
- the v4 discovery document: “See your Google Health reproductive health data”
Scope missing from the Scopes page
The v4 discovery document defines .logged_symptoms.readonly ("See your Google Health logged symptoms data"); the Scopes page does not list it.
- the v4 discovery document: “https://www.googleapis.com/auth/googlehealth.logged_symptoms.readonly”
- the v4 discovery document: “See your Google Health logged symptoms data”
Scope missing from the Scopes page
The v4 discovery document defines .mindfulness.readonly ("See your Google Health mindfulness data"); the Scopes page does not list it.
- the v4 discovery document: “https://www.googleapis.com/auth/googlehealth.mindfulness.readonly”
- the v4 discovery document: “See your Google Health mindfulness data”
Scope missing from the discovery document
The Scopes page documents .nutrition.readonly ("See your Google Health nutrition data."); the v4 discovery document does not define it.
- Google's Scopes page: “.nutrition.readonly”
- Google's Scopes page: “See your Google Health nutrition data.”
Restricted-scope wording differs
Google's pages word the restricted-scope rule differently: About the Google Health API says "all"; App verification says "most".
- Google's About page: “All Google Health API scopes are categorized as Restricted, necessitating a privacy and security review for access.”
- Google's app-verification page: “Most scopes for the Google Health API are restricted, which means you must complete verification before your app is publicly available.”
The same disagreement shows on the data types whose rows list the scope: food, food-measurement-unit, hydration-log, nutrition-log.
How Google says to request scopes
Implementation
To provide the best user experience and ensure security compliance, when requesting scopes you should:
- Only request access to the specific data scopes your application requires to function, and explain the specific user benefit of each permission in an in-app disclosure before launching the OAuth consent screen.
- Only configure "write" access (for example, using a
writeonlyscope) if you are sending data to Google Health. - Users have the right to grant granular permissions. Never crash, show a generic technical error, or render a blank screen if a user withholds one or more requested scopes:
- Partial consent (graceful degradation): If a user grants some scopes (for example, granting Heart Rate but withholding Steps), keep your application functional using the permitted data streams. Display inline, context-specific prompts explaining which features are limited and provide a direct link to re-authorize missing scopes.
- Zero consent (fallback UI): If a user deselects all scopes, route them to a dedicated Missing Permissions screen that explains why the integration requires at least one permission (for example, "For the best user experience, we recommend enabling all scopes") and provide a prominent Grant Scopes button to re-launch the consent flow.
- Don't maintain duplicate in-app permission toggles that conflict with Google Consent settings. If a user revokes scope access through their Google Account, reflect that change in your app UI immediately.
Quoted from Google's Scopes page, last updated 2026-10-09, read 2026-10-17.
Scope changes in Google’s release notes
August 17, 2026 — New Scopes
Added the following write-only scopes:
.logged_symptoms.writeonlyfor logging physical symptoms..mindfulness.writeonlyfor logging emotional states and moods..reproductive_health.writeonlyfor logging menstrual periods and ovulation test results.
May 26, 2026 — New Scopes
.ecg.readonlyfor reading ECG data..irn.readonlyfor reading IRN data.
May 26, 2026 — Scope Name Changes
Replacing read/write scopes with.writeonly. Developers must now explicitly specify read and write permissions.
.activity_and_fitnessis now.activity_and_fitness.writeonly.health_metrics_and_measurementsis now.health_metrics_and_measurements.writeonly.nutritionis now.nutrition.writeonly.profileis now.profile.writeonly.settingsis now.settings.writeonly.sleepis now.sleep.writeonly
Quoted from Google’s release notes, last updated 2026-10-09, read 2026-10-17.
Which Fitbit Web API scope maps to which of these: Google’s scope-mapping table. What a restricted scope means for launch: verification and rate limits.
Questions
What prefix do Google Health API OAuth scopes start with?
https://www.googleapis.com/auth/googlehealth. Google's Scopes page: "All Google Health API scopes begin with: https://www.googleapis.com/auth/googlehealth" Google's tables print each scope as the suffix after it, such as .sleep.readonly, so the full scope is https://www.googleapis.com/auth/googlehealth.sleep.readonly.
What does the googlehealth.activity_and_fitness.readonly scope cover?
Google's Scopes page: "See your Google Health activity and fitness data." Google's data-types table lists it for 17 data types: active-energy-burned, active-minutes, active-zone-minutes, activity-level, altitude, calories-in-heart-rate-zone, daily-vo2-max, distance, exercise, floors, run-vo2-max, sedentary-period, steps, swim-lengths-data, time-in-heart-rate-zone, total-calories and vo2-max.
Is googlehealth.nutrition.readonly a valid Google Health API scope?
Google's pages disagree. The Scopes page documents .nutrition.readonly ("See your Google Health nutrition data."), and the data-types table lists it for food, food-measurement-unit, hydration-log and nutrition-log, but the v4 discovery document (read 2026-10-17) does not define https://www.googleapis.com/auth/googlehealth.nutrition.readonly, and none of its methods lists it among accepted scopes. Test a consent request with it before shipping.
Which Google Health API scopes are missing from Google's Scopes page?
3 that the v4 discovery document defines: .reproductive_health.readonly ("See your Google Health reproductive health data"), .logged_symptoms.readonly ("See your Google Health logged symptoms data") and .mindfulness.readonly ("See your Google Health mindfulness data"). Google's Scopes page, last updated 2026-10-09, lists 18 scopes without them.
Sources checked
- Scopes — last updated 2026-10-09 · read 2026-10-17
- Google Health API data types — last updated 2026-10-06 · read 2026-10-17
- Google Health API discovery document (v4) — revision 20261014 · read 2026-10-17
- Release notes — last updated 2026-10-09 · read 2026-10-17
Google’s text is quoted for identification; each guide page’s footer reads: “Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License.”. Generated from Google’s pages by scripts/fetch-google-health-api.mjs, not typed by hand; Google’s documentation remains the authority.