Apple deliberately limits what an app can learn about read authorization in HealthKit. An app cannot simply distinguish denied read access from the absence of readable samples.
For the HealthKit entry, design the empty state around that uncertainty. Use neutral wording such as “No data available to this app,” and test authorized, denied and genuinely empty scenarios. Do not turn missing results into a claim about a person's health or activity.