Withings data, in your own stack.
Users connect their Withings account over OAuth. Open Health Sync pulls their measurements on a schedule and when Withings sends a push notification.
- Source
- Scales, watches, blood pressure monitors
- How the data arrives
- Cloud API, OAuth 2.0, scheduled pulls and push notifications.
What it collects.
Each record maps to the same model as every other source, with the provider, source and device it came from.
- Body measurements
- Activity
- Sleep
- Workouts
- ECG
How it works.
- 01
The user connects
Your server asks for a consent URL and sends the user to Withings. Tokens are stored encrypted.
- 02
The server pulls
A first backfill, then scheduled pulls, and webhooks where the provider sends them. Every raw payload is kept.
- 03
You read one model
Units, time zones and duplicates handled, served over REST, the read-only MCP server and FHIR R4.
Before you start.
- Bring your own Withings developer app: nothing is shared between instances.
- The callback URL is <OHS_PUBLIC_URL>/oauth/withings/callback, and ohs doctor prints it.
- Withings can refuse an http callback outside local testing, so give a real instance an https address.
Set it up.
Register your own Withings app, set its callback to <OHS_PUBLIC_URL>/oauth/withings/callback and put its credentials in .env. The guide has every step.
# .envOHS_WITHINGS_CLIENT_ID=...OHS_WITHINGS_CLIENT_SECRET=...# Ask for a consent URL, then send the user to authorize_urlcurl -s -X POST $OHS/v1/users/$USER_ID/connections/withings \ -H "Authorization: Bearer $KEY" -H 'Content-Type: application/json' \ -d '{"redirect_uri":"https://app.example.org/connected"}'# Read what came incurl -s "$OHS/v1/users/$USER_ID/samples?type=body_mass" -H "Authorization: Bearer $KEY"Questions.
Can I use Withings with Open Health Sync today?
Yes. The Withings connector ships in v0.1.0.
Do I need anything from Withings?
Bring your own Withings developer app: nothing is shared between instances.
Where does the data go?
Only to the server you run. Open Health Sync is self-hosted software, not a service: no account with us and no call home. Each user can be deleted with one call, raw files included.