Period Tracking Apps Under Fire for Sharing Sensitive Health Data

Users of menstrual cycle tracking apps should exercise caution, as a new report indicates that some applications share sensitive health information with major technology firms. A joint investigation by Mozilla Foundation and the BBC uncovered that while certain apps claim to protect user privacy, they may be disclosing personal data.

Stardust, an app combining period tracking with astrology, advertises its data as "private." However, Mozilla discovered that detailed user information, including pregnancy status, contraceptive use, PMS symptoms, and alcohol consumption habits, is shared with RudderStack. Although companies assert this data is technically processed and anonymized, experts warn of potential security breaches.

Other apps present varying approaches to privacy. Spot On, linked to Planned Parenthood, generally does not share data directly but may do so through features like its AI chatbot or health facility search, which can connect to external analytics companies. Conversely, Euki stands out by storing all user data exclusively on the device, allowing for completely anonymous use and requiring no registration.

Apps like Flo and Clue, while not sharing data with third parties, store extensive user information on their servers, posing potential security risks. Flo, for instance, settled with the U.S. Federal Trade Commission in 2021 over data sharing with Google and Meta, though the company states these issues are resolved. Experts emphasize that user trust depends not only on current practices but also on an app's history of privacy protection. Sara Geoghegan from the Electronic Privacy Information Center notes that such apps can reveal sensitive details that could be exploited legally or criminally, particularly in the context of evolving reproductive rights.