What the Case Concerned
Period and fertility tracking apps collect detailed information about menstrual cycles, sexual activity, contraception, pregnancy attempts and outcomes. Users enter it precisely because the app promises to keep it private.
Regulatory action concerned the sharing of that information with advertising and analytics providers, despite privacy representations telling users their health data would not be disclosed.
HIPAA usually does not apply to health apps
HIPAA covers healthcare providers, insurers and their business associates. A consumer app you download yourself is generally none of those, so the protection is whatever the privacy policy says plus general consumer protection law, which is far weaker than most users assume.
The Legal Framework
Federal authority over deceptive practices applies where privacy representations differ from actual data handling. The health breach notification rule can also reach health apps outside HIPAA, requiring notification when identifiable health information is disclosed without authorisation.
State privacy statutes apply alongside, and several states have enacted specific protections for reproductive health data, restricting its sale and its disclosure in response to out-of-state legal process.
Relief in these matters has combined prohibitions on further sharing without express consent with requirements to instruct recipients to delete data already transferred.
Protecting Reproductive Health Data
Review what an app shares with third parties for advertising specifically, rather than relying on general assurances about security. The two are different sections of a privacy policy and often say different things.
Prefer apps that store data locally on the device rather than syncing to a server, since data that never leaves your phone cannot be shared, breached or subpoenaed from a company.
Local storage removes most of the risk
Some tracking apps keep all data on the device with no account and no server sync. That structure eliminates third-party sharing, server breaches and company-held records in one step, at the cost of cross-device convenience.
Free Legal Evaluation
Do You Qualify to File a Claim?
Our network of verified plaintiff attorneys offers free, no-obligation case evaluations. Contingency fee representation means you pay nothing unless you win.
Period Tracking App Lawsuits: Health Data Sharing and Privacy Claims: Frequently Asked Questions
Answers to the most common questions about this case and your legal options.
What did the period app case concern?
Sharing intimate cycle and fertility information with advertising and analytics providers despite privacy representations that it would not be disclosed.
Does HIPAA protect period tracking apps?
Generally no. HIPAA covers providers, insurers and their business associates, not consumer apps you download yourself.
What law does apply?
Federal authority over deceptive practices, the health breach notification rule for apps outside HIPAA, and state privacy statutes including reproductive data protections.
How can I protect this data?
Read what the app shares for advertising specifically, and prefer apps storing data locally on the device with no server sync.
What relief have these cases produced?
Prohibitions on sharing without express consent, and requirements to instruct recipients to delete data already transferred.
Legal Disclaimer
This article is general legal information, not legal advice, and does not create an attorney-client relationship. Case status, eligibility criteria, and any amounts described are as reported at the date shown and may change. Consult a licensed attorney in your jurisdiction about your own situation.