Celestial Infosoft
Cycle tracking

What FTC actions against fertility apps teach about health-data privacy

US regulators have acted against period and fertility apps for sharing sensitive health data. What happened and a short checklist for users and app owners.

Illustration for the guide: What FTC actions against fertility apps teach about health-data privacy
On this page

This page summarises older public cases. It is not legal advice and does not describe any specific app on this site. Laws differ by country and change, so check current rules.

What happened

The US Federal Trade Commission has publicly acted against companies behind period and fertility tracking apps:

  • Flo Health: the FTC said Flo promised to keep users’ health data private but shared sensitive data from users with marketing and analytics firms. The final order required Flo to obtain users’ affirmative consent before sharing health information, to commission an independent privacy review and to notify affected users.
  • Premom (Easy Healthcare), 2023: the FTC announced a settlement of $200,000, including a $100,000 civil penalty, saying the app shared data for advertising without clearly telling users or getting their permission. The case also relied on the Health Breach Notification Rule.

Why this matters

Cycle data can reveal pregnancy, health conditions and personal choices. If it leaks or is used for advertising, the harm can be serious. The lessons apply to any health or wellness app.

For users

  1. Read the privacy section on the store page before you install.
  2. Prefer apps that explain exactly what is collected and why.
  3. Check whether data is shared with advertisers or analytics partners, and whether you can opt out.
  4. Use a lock on the app and keep your phone updated.
  5. Learn how to delete your data. Use the privacy checklist for cycle tracking apps.

For app owners

  • Make sure your privacy policy and Data safety form match what the app does.
  • Ask for clear consent before sharing health information.
  • Audit third-party SDKs. Many collect data by default.
  • Offer account and data deletion.
  • Review rules for each country you serve.

Remember the limits of tracking

A tracker is not a medical device or contraceptive. See how period trackers work and when to see a doctor.

Frequently asked questions

Did regulators act against period or fertility apps?

Yes. Public FTC announcements describe actions against Flo Health and against the owner of the Premom app over how sensitive health data was shared.

What does this mean for me as a user?

Check what an app collects, who it shares data with and how you can delete it, before you log health information.

What does it mean for app owners?

Be accurate in privacy statements, obtain clear consent before sharing health data and limit third-party tools.

More guides on this topic