What your period app knows about you — and who it tells
A period tracker holds some of the most intimate data that exists about you: when you bleed, when you’re fertile, when you had sex, when a period is late, when it suddenly stops. That’s not step-count data. Read as a timeline, it can reveal a pregnancy before you’ve told a soul — or the end of one.
So it’s worth asking the question most of us skip on install day: where does all of that actually go?
The three destinations
1. The company’s servers. Most apps sync your log to the cloud by default. That’s convenient — and it means your reproductive timeline lives in a database governed by a privacy policy that can be rewritten, a company that can be acquired, and security that can fail. Cycle apps have been caught sharing data with ad platforms before; regulators have brought cases over exactly this.
2. Third parties. Analytics SDKs, ad networks, “research partners.” The word to watch is anonymized — cycle data plus a device identifier plus a location is often trivially re-identifiable.
3. Whoever can compel it. Companies must respond to valid legal process for records they hold. Since 2022, this stopped being theoretical in the United States. The only data that can’t be produced is data that was never collected.
How to read a privacy label in 20 seconds
Both app stores now force an answer to “what does this app collect?” Skip the marketing and read the label. “Data used to track you” — should be none, full stop. “Data linked to you” — for a health app, treat anything here as a decision point. The gold standard is rare and unambiguous: “Data collected: none.” An app can only print that if your log genuinely never leaves your device.
Five questions before you log
- Can I use it without creating an account?
- Is my data stored on my device, encrypted — or on their servers?
- What does the app-store privacy label say, exactly?
- Is there a delete everything button, and does it mean it?
- How does the company make money? If you can’t tell, the answer is probably you.
This article is for general education, not medical or legal advice.
Privacy by architecture
Not a promise — a design. Join the waitlist and see the difference.