SMS access is for transaction-shaped messages. Internet powers sign-in, sync, and optional assist. Notifications are for gentle reminders you control.
Who actually holds my profile?
Firebase Auth (email or Google) plus Firestore for profile prefs — see paths and vendors in the privacy policy. Transactions stay primarily on-device in the product design we ship.