[evv]

A "cloud API" is exactly the opposite of what the OP is looking for. Why can't we get data out of our devices without having to transmit it to their servers, or through black-box software?

I definitely expect better treatment of privacy from a young nordic company like Oura. The product looks pretty great, so I would be a hugely loyal customer if they fixed these privacy issues.