Actually, you want it on both.
You put it on the HS, rub it in with a plastic bag on your finger, then wipe it off.
This fills in any microscopic "cracks" or "holes" that are on the surface of the HS.
Then you put the thin layer on the cpu (heatspreader).
They explain it very well
here.