Flo covertly shares users' menstrual cycle data
Period tracker Flo shared data with Facebook, Google and others every time a user had their period or indicated that they wanted to get pregnant , despite promising to keep users’ sensitive health data private . Flo is a US-based period tracker and pregnancy app used by over 100 million people which allows users to 'access personalized health insights, virtual dialogs, and dozens of courses to learn how your cycle affects your body and well being.' A critical WSJ article sparked a strong backlash from civil rights and privacy groups, as well as from customers. ➕ January 2021. The finding resulted in Flo Health settling with the US Federal Trade Commission (FTC). According to the terms of the deal, Flo must notify affected users about the disclosure of their health information and stop misrepresenting how it collects, manages, and uses customer data. ➕ June 2024. Flo subsequently advised customers it would launch an ‘Anonymous Mode’ that removes their personal identity from their accounts, prompting further users to cancel their accounts. System 🤖 Flo 🔗 Operator: Flo Health Developer: Flo Health Country: USA Sector: Health Purpose: Track menstrual cycle Technology: Prediction algorithm Issue: Privacy; Transparency
- Date it happened
- 2019-02-01
- Organisation involved
- Flo Health
- Product, system or model
- Flo Period & Ovulation Tracker
This incident was imported from AIAAIC and is used under CC BY-SA 4.0. Our additions to it — the structured fields, the translation, the checks against other reports — are published under the same licence.
This is a record of what was reported, not a finding that anyone broke the law. If it names your organisation and you believe it is wrong, the corrections process is free and open to everyone.