4 ms·

The privacy problems hidden in your period tracker

109 points by tchalla 3mo ago

bell-cot 3mo ago
Only one (of the six reviewed) that I'd call acceptable - > Euki is the only app Mozilla recommends without reservations. "Euki is special," Wodinsky* says. > Unlike the other apps on this list, Mozilla says Euki keeps all your health information stored on your device, without even sending it to the company's servers. > You don't even need to make an account, so you can stay completely anonymous. Euki also offers a "decoy" feature that shows fake, harmless information if someone gets your phone and tries to snoop. *Shoshana Wodinsky, a privacy research analyst who tested 6 period tracker on behalf of the Mozilla Foundation
- _def 3mo ago
  It's really sad to see that this is not the usual kind of software people are exposed too.
- _blk 3mo ago
  It indeed looks like the rest are "you're the product" (tm) type apps. Honestly, I don't expect much from Play Store (or App Store for that matter) these days but as a developer it's terrible what hoops you have to go through to publish your app.. Endless forms to fill out manually and then the overall store quality is just disappointing. Ads, ads, more ads and privacy and security debacles. Now it also looks like locking down on outside app stores like F-Droid.. Developers and hackers will find solutions but for the general population I'm not very hopeful. As to the period apps: > This is also not Planned Parenthood's first run in with privacy criticisms. I wrote about similar problems four years ago, for example. The organisation didn't respond to a request for comment. .. And it doesn't look like they care to change anything about it. Who can end this on a positive note? I hate to be this negative but I don't see it.
starefossen 3mo ago
Apple Health was not among the reviewed?
- consonaut 3mo ago
  It's e2ee and only part of your icloud backup if you enable it. And you can separately manage read/write access from other apps. https://support.apple.com/en-gb/guide/security/sec88be9900f/web https://support.apple.com/en-gb/guide/security/sec88be9900f/...
deleted 3mo ago
[deleted]
troyvit 3mo ago
Somebody on HN recommended drip awhile ago: https://f-droid.org/packages/com.drip/ https://f-droid.org/packages/com.drip/ It's not mentioned in the article. Like Euki it's local-only. I don't know how they compare as far as features but it's cool that there are two good apps out there.
soumyadeb 3mo ago
RudderStack founder here. Although the article doesn't accuse us of doing anything improper, we weren't contacted for comment, so I'd like to clarify our role. We are customer data infrastructure, not a data broker. We do not buy, sell or monetize the customer data that passes through our systems. Our role is analogous to infrastructure: customers choose what data to send, and RudderStack routes that data to the destinations they configure (analytics tools, data warehouses, marketing platforms, etc.). The customer owns the data and decides where it goes; RudderStack does not repurpose it for its own business. Infrastructure providers like us should be held to high standards for security and privacy, but we should not be confused with companies that collect or monetize end-user data.
- _blk 3mo ago
  Awesome insight. Thanks for clarifying! @bbc please update because there's definitely an implicit complicity in your article.
  - soumyadeb 3mo ago
    Will do. Thanks
- inigyou 3mo ago
  Are analytics tools, data warehouses, and marketing platforms the only types of destinations you support? Because if that's the case then your system appears to only be useful for privacy invasions.
  - deleted 3mo ago
    [deleted]
  - soumyadeb 3mo ago
    And others - customer support, feature flags, personalization, data quality, machine learning, internal BI, operational databases, security systems etc. Ultimately, RudderStack is infrastructure that moves first-party data between systems more like message queues.
annzabelle 3mo ago
I use Macrofactor (macro tracking app for lifters with good privacy/UI) as a weight/period tracker, and occasional macro tracker. I don't think anybody is going to go to the effort to hack their databases to find the 100 women tracking our periods on it. The one downside is that they do days since last period as days since the end of your last period, not days since the start, unlike literally every woman and gynecologist ever.
- nonameiguess 3mo ago
  MacroFactor is very rare in the modern software world, probably because it was created by fitness science junkies rather than VCs or engineers. Greg was extremely adamant from the start that they're charging money, take it or leave it, but selling the product itself is all they're ever going to sell. No monetizing user data. No dark patterns to drive engagement and keep you in the app. All they're trying to drive is better lifting and better eating because that's honest to god Greg and Lindsay Nuckols passions in life, not getting rich. Classic lifestyle business that'll never eat the world, but it'll pay the rent in North Carolina for two 40 year-olds with no kids.
  - annzabelle 3mo ago
    I do find that the best apps are the paid ones, they don't need to be relying on selling user data to make a profit. Sadly, a lot of the great boutique lifestyle business paid apps are apple only, and I can't stand the typing experience on iphones.
    - faangguyindia 3mo ago
      >I do find that the best apps are the paid ones, they don't need to be relying on selling user data to make a profit. There is no limit to greed, you can find billionaires who are after trillions. This line of reasoning is at fault.
  - Slow_Hand 3mo ago
    I've been using Macrofactor for many years (after a HN recommendation) and now that you mention it, I've been super happy with the experience and don't detect a whiff of dark patterns, unwarranted tracking, or bad business practices that plague other apps. The value of tracking my diet and health has been well worth it. I will happily pay their asking price and it's heartening to hear that the founders/owners are committed to good practices. Side note: I recently switched over fully to the Proton Unlimited ecosystem. Another ethical service that I will happily pay for. I'm beginning to think that we might be able to turn this shitty ad-industry-lead ship around, folks. Or at least we have strong alternatives these days for the people who care. Now if I can just get my social groups to use Signal.
Cider9986 3mo ago
List of recommended ones: https://www.privacyguides.org/en/health-and-wellness/#menstrual-cycle-tracking https://www.privacyguides.org/en/health-and-wellness/#menstr... >Drip, Euki, and Apple Health
kevin_thibedeau 3mo ago
Whenever this issue comes up I feel the need to relay a story about a meeting with a databroker in 1998 who was tracking menstrual cycles using purchasing records of a wide variety of consumer goods. They will track you to optimize their manipulative, targeted advertising whether you have an invasive app or not.
- annzabelle 3mo ago
  I've heard rumors, maybe that far back, of women getting mail ads for baby clothes a couple weeks before having a positive pregnancy test.
  - vasco 3mo ago
    You are misremembering, what it you're referring to is the Target pregnancy prediction score which was advertised a lot in the early 2010s as the way "big data" was going to change the world because they figured pregnant women bought similar things https://www.forbes.com/sites/kashmirhill/2012/02/16/how-target-figured-out-a-teen-girl-was-pregnant-before-her-father-did/ https://www.forbes.com/sites/kashmirhill/2012/02/16/how-targ...
- m463 3mo ago
  I wonder about not only baby or feminine supplies, but also snack coupons and dating apps
  - kevin_thibedeau 3mo ago
    Any behavioral pattern with a 28 day correlation will pop out. Once you get a rough estimate, you can aggregate subjects with dates shifted into alignment to find more subtle correlations.
- throwway120385 3mo ago
  What's different is that the period tracker apps have women provide that information pretty directly. The data broker probably had to do a lot of work and then estimate with a confidence level. So there's a significant difference in level of effort there, and then because of the estimate the data becomes much less valuable because it's only plausible it's not certain. This argument gets trotted out whenever people talk about privacy and protection of personal information. I hear it when people discuss LPR systems, cameras, and the like too. These data-gathering applications of technology should be treated specially because they make it extremely easy to gather high-confidence data about individuals. I bet your data broker couldn't predict when someone was ovulating or whether they were pregnant or count how many miscarriages they had just based on purchase history? This is all data that period tracker apps capture pretty directly. The miscarriages one is particularly bad because that data could be misconstrued as abortion and in US states where that's illegal it could get you into real trouble. There's a small but vocal subset of the population that seems to want to punish women for anything other than a healthy delivery. But when my spouse and I were trying everyone we talked to had at least one if not more miscarriage stories.
chambored 3mo ago
As others in the thread have pointed out, Euki is a wonderful application and having interacted with members of their team, I know they are committed to maintaining their liberating privacy stances.
scotty79 3mo ago
Why not something p2p and encrypted? https://peerloomllc.com/pearpetal/ https://peerloomllc.com/pearpetal/ No servers, no problem. You fear losing your device? I'm sure you have more than one, any additional one you have is a fully functional backup. The technology it is built on is extremely cool. http://pears.com/ http://pears.com/ Or better yet. Why trust this one (even though the source is on github)? You can just ask your AI agent to build you your custom one on the basis of this technology.
fragmede 3mo ago
Period trackers are the perfect usecase for homomorphic encryption, where the system can operate on the data without knowing what the data says. It's slow and has a lot of overhead, but it's an active area of research. That way, the platform doesn't know what you're telling it. You have to trust the platform to have implemented it properly, and it's rather nerdy a detail, so it's no surprise there isn't one yet.
- buredoranna 3mo ago
  I love this stuff, even though its way over my head > We are a community of researchers and developers interested in advancing Fully Homomorphic Encryption (FHE) and other secure computation techniques. https://fhe.org/ https://fhe.org/ (edit: formatting)
- deleted 3mo ago
  [deleted]
benoau 3mo ago
This is the second time [1] that analytics in period apps have been problematic, and also follows the recent hack of MixPanel [2] exposing OpenAI usage data. Seems like 3rd-party analytics are becoming a new frontier for security issues. [1] https://www.thebureauinvestigates.com/stories/2025-09-03/meta-was-caught-eavesdropping-on-a-period-app-could-this-be-the-start-of-a-pushback-against-big-tech https://www.thebureauinvestigates.com/stories/2025-09-03/met... [2] https://openai.com/index/mixpanel-incident/ https://openai.com/index/mixpanel-incident/
- soumyadeb 3mo ago
  That one was a security incident—data that had been legitimately collected by an analytics provider was exposed due to a breach. This one is about privacy — what data an app chooses to collect and which third parties it intentionally sends that data to. The concern isn't that someone hacked those companies. The distinction is important for us. Disclaimer: RudderStack founder.
  - wpm 3mo ago
    The word "legitimate" is doing some work there If they can't keep it safe they have no legitimate interest having the data
quadrifoliate 3mo ago
I'm male, and clearly don't know enough about this--are there any benefits for the user that a period tracking app can provide by reaching out to the cloud? I guess backing up your data is an obvious one. I thought entering the information is like 90% of the tracking, everything else is mostly calculation/averaging and none of it needs to live on a server. The Euki app seems like my idea of what it would always be.
- makeitdouble 3mo ago
  Yes, backing up is the most obvious reason to have it live on a server from the user POV. And of course the app vendor will want more lockin and be able to keep the data hostage. Paying for apps doesn't help as much as expected, as they'll want to keep the revenue stream alive. Solving this conundrum would require to deal with both side of the coin. The real solution to this would be to give everyone and their dog a standardised online server with legally enforced privacy, and have sandboxed apps manage data in and out in a interexchangeable format, but I feel like I'm asking for peace on earth. PS: we have banks for money, there should really be something similar for data.
  - RajT88 3mo ago
    > PS: we have banks for money, there should really be something similar for data. It's very hard to imagine a government who would have this too far up their list of priorities. Switzerland maybe. Then Germany, France. Maybe. It's hard to imagine it catching on between the monied interests who can influence government and the lack of consumer awareness of the problem it is solving.
  - epihelix 3mo ago
    Not quite what you're suggesting, but at least Nextcloud (and other open self-hosting platform) servers are a thing. All you need is for the app to provide the option of saving to local storage – your cloud server software provides a local storage endpoint and does the rest.
  - ButlerianJihad 3mo ago
    > PS: we have banks for money, there should really be something similar for data. There is, but the majority of HN participants hate the existing banks with a white-hot passion, and rail against those banks, and prefer to store their cash under their mattress, and their photos in Chad's garage, and they actively discourage everyone else from trusting banks, especially the biggest ones.
elephant81 3mo ago
What is the privacy concern vs a weight loss tracker?
- tredre3 3mo ago
  Nobody cares that you're fat. But apparently (some) Americans care if your tracker shows that you've missed your period for one or two months before resuming as normal (indicating a possible abortion).
  - TitaRusell 3mo ago
    Ultimately the only protection for that is cultural. If a majority of the population is atheist and refuses to subjugate themselves to authority it doesn't matter what data is leaked. Will that day ever come for America? Unlikely.
    - psd1 3mo ago
      It's not presently visible, agreed. Two problems with your gates: 1. "intolerant minority" - america's christ-reagan constituency is shrill enough to get its way without coming close to half the electorate, and 2. you can refuse social credit systems like you can punch mist. In other words, you only need perhaps 10% of the electorate to be utter cunts and you're fucked. I don't know what country has below 10% utter cunts... Bhutan?
SoftTalker 3mo ago
I would never trust any private health data to an app. I don't care what promises or claims they make. The technology is fundamentally untrustable, and even if a vendor is doing the right thing today, they (or any intermediary) could change tomorrow.
- bell-cot 3mo ago
  > even if a vendor is doing the right thing today, ... they could fail to realize that they were hacked last year. Sadly, the same issues apply to the copies of your private health data in your doctor's computer, your insurance company's computer, your hospital's computer, your pharmacy's computer, etc. Avoiding the app reduces the attack surface. With the minor moral victory of not having gone out of your way to make it easy for the enemies of your privacy.
  - SoftTalker 3mo ago
    I avoid the medical establishment as much as I can, partly for this reason.
- Terr_ 3mo ago
  > they (or any intermediary) could change tomorrow. Adding to this, my understanding (IANAL) is that any promises to delete or limit sharing of your data could be swept-aside by a bankruptcy judge, putting priority on liquidating the company and its assets for the maximum amount of money for creditors. If well-intentioned operators erase your data before the company falls into the hands of the trustee or creditors, an unsympathetic legal-system could end up charging them with crimes for it.
- fsflover 3mo ago
  > I would never trust any private health data to an app. I don't care what promises or claims they make. If the app is free software, then you don't need to trust; you can verify instead. See: apps on F-Droid.
- lepisma 3mo ago
  [dead]
deleted 3mo ago
[deleted]
guilhas 3mo ago
On the other hand Why are so many women saying their periods are suddenly late or irregular? Experts explain https://dailynews.co.za/lifestyle/health/2026-07-14-why-are-so-many-women-saying-their-periods-are-suddenly-late-or-irregular-experts-explain/ https://dailynews.co.za/lifestyle/health/2026-07-14-why-are-... Your menstrual cycle may affect how well vaccines work https://www.newscientist.com/article/2532245-your-menstrual-cycle-may-affect-how-well-vaccines-work/ https://www.newscientist.com/article/2532245-your-menstrual-... COVID-19 vaccine 'disrupted the periods of thousands of women' - but changes 'short-lived' https://news.sky.com/story/covid-19-vaccine-disrupted-the-periods-of-thousands-of-women-but-changes-short-lived-12408621 https://news.sky.com/story/covid-19-vaccine-disrupted-the-pe... I always use open source apps, but at the same time I wonder how can my we all benefit from each other data respectfully of privacy, health or otherwise And anyway the data that the other 50 apps are collecting on most people phones can be used to infer most of this. Your locations, what you bought recently, what you searched online, which sites have you been, what you asked your chat bot, what you liked or viewed in social media...
like_any_other 3mo ago
Ctrl+F "open source", "free software": 0 results In contrast with the (single) mention of open-source on Mozilla's website that the BBC article cites: https://www.mozillafoundation.org/en/nothing-personal/period-ovulation-trackers/ https://www.mozillafoundation.org/en/nothing-personal/period... These articles are always so vague, never explaining the difference between proprietary and free software, and even treating sending data to company servers as some kind of acceptable default, only raising privacy alarms when the data is also sent (directly) to some 3rd party server. As if that makes any difference once the company has your data - they can sell it to whoever themselves.

109 points by tchalla 3mo ago

Only one (of the six reviewed) that I'd call acceptable - > Euki is the only app Mozilla recommends without reservations. "Euki is special," Wodinsky* says. > Unlike the other apps on this list, Mozilla says Euki keeps all your health information stored on your device, without even sending it to the company's servers. > You don't even need to make an account, so you can stay completely anonymous. Euki also offers a "decoy" feature that shows fake, harmless information if someone gets your phone and tries to snoop. *Shoshana Wodinsky, a privacy research analyst who tested 6 period tracker on behalf of the Mozilla Foundation

_def 3mo ago
It's really sad to see that this is not the usual kind of software people are exposed too.
_blk 3mo ago
It indeed looks like the rest are "you're the product" (tm) type apps. Honestly, I don't expect much from Play Store (or App Store for that matter) these days but as a developer it's terrible what hoops you have to go through to publish your app.. Endless forms to fill out manually and then the overall store quality is just disappointing. Ads, ads, more ads and privacy and security debacles. Now it also looks like locking down on outside app stores like F-Droid.. Developers and hackers will find solutions but for the general population I'm not very hopeful. As to the period apps: > This is also not Planned Parenthood's first run in with privacy criticisms. I wrote about similar problems four years ago, for example. The organisation didn't respond to a request for comment. .. And it doesn't look like they care to change anything about it. Who can end this on a positive note? I hate to be this negative but I don't see it.

starefossen 3mo ago

Apple Health was not among the reviewed?

consonaut 3mo ago
It's e2ee and only part of your icloud backup if you enable it. And you can separately manage read/write access from other apps. https://support.apple.com/en-gb/guide/security/sec88be9900f/web https://support.apple.com/en-gb/guide/security/sec88be9900f/...

deleted 3mo ago

[deleted]

troyvit 3mo ago

Somebody on HN recommended drip awhile ago: https://f-droid.org/packages/com.drip/ https://f-droid.org/packages/com.drip/ It's not mentioned in the article. Like Euki it's local-only. I don't know how they compare as far as features but it's cool that there are two good apps out there.

soumyadeb 3mo ago

RudderStack founder here. Although the article doesn't accuse us of doing anything improper, we weren't contacted for comment, so I'd like to clarify our role. We are customer data infrastructure, not a data broker. We do not buy, sell or monetize the customer data that passes through our systems. Our role is analogous to infrastructure: customers choose what data to send, and RudderStack routes that data to the destinations they configure (analytics tools, data warehouses, marketing platforms, etc.). The customer owns the data and decides where it goes; RudderStack does not repurpose it for its own business. Infrastructure providers like us should be held to high standards for security and privacy, but we should not be confused with companies that collect or monetize end-user data.

_blk 3mo ago
Awesome insight. Thanks for clarifying! @bbc please update because there's definitely an implicit complicity in your article.
- soumyadeb 3mo ago
  Will do. Thanks
inigyou 3mo ago
Are analytics tools, data warehouses, and marketing platforms the only types of destinations you support? Because if that's the case then your system appears to only be useful for privacy invasions.
- deleted 3mo ago
  [deleted]
- soumyadeb 3mo ago
  And others - customer support, feature flags, personalization, data quality, machine learning, internal BI, operational databases, security systems etc. Ultimately, RudderStack is infrastructure that moves first-party data between systems more like message queues.

annzabelle 3mo ago

I use Macrofactor (macro tracking app for lifters with good privacy/UI) as a weight/period tracker, and occasional macro tracker. I don't think anybody is going to go to the effort to hack their databases to find the 100 women tracking our periods on it. The one downside is that they do days since last period as days since the end of your last period, not days since the start, unlike literally every woman and gynecologist ever.

nonameiguess 3mo ago
MacroFactor is very rare in the modern software world, probably because it was created by fitness science junkies rather than VCs or engineers. Greg was extremely adamant from the start that they're charging money, take it or leave it, but selling the product itself is all they're ever going to sell. No monetizing user data. No dark patterns to drive engagement and keep you in the app. All they're trying to drive is better lifting and better eating because that's honest to god Greg and Lindsay Nuckols passions in life, not getting rich. Classic lifestyle business that'll never eat the world, but it'll pay the rent in North Carolina for two 40 year-olds with no kids.
- annzabelle 3mo ago
  I do find that the best apps are the paid ones, they don't need to be relying on selling user data to make a profit. Sadly, a lot of the great boutique lifestyle business paid apps are apple only, and I can't stand the typing experience on iphones.
  - faangguyindia 3mo ago
    >I do find that the best apps are the paid ones, they don't need to be relying on selling user data to make a profit. There is no limit to greed, you can find billionaires who are after trillions. This line of reasoning is at fault.
- Slow_Hand 3mo ago
  I've been using Macrofactor for many years (after a HN recommendation) and now that you mention it, I've been super happy with the experience and don't detect a whiff of dark patterns, unwarranted tracking, or bad business practices that plague other apps. The value of tracking my diet and health has been well worth it. I will happily pay their asking price and it's heartening to hear that the founders/owners are committed to good practices. Side note: I recently switched over fully to the Proton Unlimited ecosystem. Another ethical service that I will happily pay for. I'm beginning to think that we might be able to turn this shitty ad-industry-lead ship around, folks. Or at least we have strong alternatives these days for the people who care. Now if I can just get my social groups to use Signal.

Cider9986 3mo ago

List of recommended ones: https://www.privacyguides.org/en/health-and-wellness/#menstrual-cycle-tracking https://www.privacyguides.org/en/health-and-wellness/#menstr... >Drip, Euki, and Apple Health

kevin_thibedeau 3mo ago

Whenever this issue comes up I feel the need to relay a story about a meeting with a databroker in 1998 who was tracking menstrual cycles using purchasing records of a wide variety of consumer goods. They will track you to optimize their manipulative, targeted advertising whether you have an invasive app or not.

annzabelle 3mo ago
I've heard rumors, maybe that far back, of women getting mail ads for baby clothes a couple weeks before having a positive pregnancy test.
- vasco 3mo ago
  You are misremembering, what it you're referring to is the Target pregnancy prediction score which was advertised a lot in the early 2010s as the way "big data" was going to change the world because they figured pregnant women bought similar things https://www.forbes.com/sites/kashmirhill/2012/02/16/how-target-figured-out-a-teen-girl-was-pregnant-before-her-father-did/ https://www.forbes.com/sites/kashmirhill/2012/02/16/how-targ...
m463 3mo ago
I wonder about not only baby or feminine supplies, but also snack coupons and dating apps
- kevin_thibedeau 3mo ago
  Any behavioral pattern with a 28 day correlation will pop out. Once you get a rough estimate, you can aggregate subjects with dates shifted into alignment to find more subtle correlations.
throwway120385 3mo ago
What's different is that the period tracker apps have women provide that information pretty directly. The data broker probably had to do a lot of work and then estimate with a confidence level. So there's a significant difference in level of effort there, and then because of the estimate the data becomes much less valuable because it's only plausible it's not certain. This argument gets trotted out whenever people talk about privacy and protection of personal information. I hear it when people discuss LPR systems, cameras, and the like too. These data-gathering applications of technology should be treated specially because they make it extremely easy to gather high-confidence data about individuals. I bet your data broker couldn't predict when someone was ovulating or whether they were pregnant or count how many miscarriages they had just based on purchase history? This is all data that period tracker apps capture pretty directly. The miscarriages one is particularly bad because that data could be misconstrued as abortion and in US states where that's illegal it could get you into real trouble. There's a small but vocal subset of the population that seems to want to punish women for anything other than a healthy delivery. But when my spouse and I were trying everyone we talked to had at least one if not more miscarriage stories.

chambored 3mo ago

As others in the thread have pointed out, Euki is a wonderful application and having interacted with members of their team, I know they are committed to maintaining their liberating privacy stances.

scotty79 3mo ago

Why not something p2p and encrypted? https://peerloomllc.com/pearpetal/ https://peerloomllc.com/pearpetal/ No servers, no problem. You fear losing your device? I'm sure you have more than one, any additional one you have is a fully functional backup. The technology it is built on is extremely cool. http://pears.com/ http://pears.com/ Or better yet. Why trust this one (even though the source is on github)? You can just ask your AI agent to build you your custom one on the basis of this technology.

fragmede 3mo ago

Period trackers are the perfect usecase for homomorphic encryption, where the system can operate on the data without knowing what the data says. It's slow and has a lot of overhead, but it's an active area of research. That way, the platform doesn't know what you're telling it. You have to trust the platform to have implemented it properly, and it's rather nerdy a detail, so it's no surprise there isn't one yet.

buredoranna 3mo ago
I love this stuff, even though its way over my head > We are a community of researchers and developers interested in advancing Fully Homomorphic Encryption (FHE) and other secure computation techniques. https://fhe.org/ https://fhe.org/ (edit: formatting)
deleted 3mo ago
[deleted]

benoau 3mo ago

This is the second time [1] that analytics in period apps have been problematic, and also follows the recent hack of MixPanel [2] exposing OpenAI usage data. Seems like 3rd-party analytics are becoming a new frontier for security issues. [1] https://www.thebureauinvestigates.com/stories/2025-09-03/meta-was-caught-eavesdropping-on-a-period-app-could-this-be-the-start-of-a-pushback-against-big-tech https://www.thebureauinvestigates.com/stories/2025-09-03/met... [2] https://openai.com/index/mixpanel-incident/ https://openai.com/index/mixpanel-incident/

soumyadeb 3mo ago
That one was a security incident—data that had been legitimately collected by an analytics provider was exposed due to a breach. This one is about privacy — what data an app chooses to collect and which third parties it intentionally sends that data to. The concern isn't that someone hacked those companies. The distinction is important for us. Disclaimer: RudderStack founder.
- wpm 3mo ago
  The word "legitimate" is doing some work there If they can't keep it safe they have no legitimate interest having the data

quadrifoliate 3mo ago

I'm male, and clearly don't know enough about this--are there any benefits for the user that a period tracking app can provide by reaching out to the cloud? I guess backing up your data is an obvious one. I thought entering the information is like 90% of the tracking, everything else is mostly calculation/averaging and none of it needs to live on a server. The Euki app seems like my idea of what it would always be.

makeitdouble 3mo ago
Yes, backing up is the most obvious reason to have it live on a server from the user POV. And of course the app vendor will want more lockin and be able to keep the data hostage. Paying for apps doesn't help as much as expected, as they'll want to keep the revenue stream alive. Solving this conundrum would require to deal with both side of the coin. The real solution to this would be to give everyone and their dog a standardised online server with legally enforced privacy, and have sandboxed apps manage data in and out in a interexchangeable format, but I feel like I'm asking for peace on earth. PS: we have banks for money, there should really be something similar for data.
- RajT88 3mo ago
  > PS: we have banks for money, there should really be something similar for data. It's very hard to imagine a government who would have this too far up their list of priorities. Switzerland maybe. Then Germany, France. Maybe. It's hard to imagine it catching on between the monied interests who can influence government and the lack of consumer awareness of the problem it is solving.
- epihelix 3mo ago
  Not quite what you're suggesting, but at least Nextcloud (and other open self-hosting platform) servers are a thing. All you need is for the app to provide the option of saving to local storage – your cloud server software provides a local storage endpoint and does the rest.
- ButlerianJihad 3mo ago
  > PS: we have banks for money, there should really be something similar for data. There is, but the majority of HN participants hate the existing banks with a white-hot passion, and rail against those banks, and prefer to store their cash under their mattress, and their photos in Chad's garage, and they actively discourage everyone else from trusting banks, especially the biggest ones.

elephant81 3mo ago

What is the privacy concern vs a weight loss tracker?

tredre3 3mo ago
Nobody cares that you're fat. But apparently (some) Americans care if your tracker shows that you've missed your period for one or two months before resuming as normal (indicating a possible abortion).
- TitaRusell 3mo ago
  Ultimately the only protection for that is cultural. If a majority of the population is atheist and refuses to subjugate themselves to authority it doesn't matter what data is leaked. Will that day ever come for America? Unlikely.
  - psd1 3mo ago
    It's not presently visible, agreed. Two problems with your gates: 1. "intolerant minority" - america's christ-reagan constituency is shrill enough to get its way without coming close to half the electorate, and 2. you can refuse social credit systems like you can punch mist. In other words, you only need perhaps 10% of the electorate to be utter cunts and you're fucked. I don't know what country has below 10% utter cunts... Bhutan?

SoftTalker 3mo ago

I would never trust any private health data to an app. I don't care what promises or claims they make. The technology is fundamentally untrustable, and even if a vendor is doing the right thing today, they (or any intermediary) could change tomorrow.

bell-cot 3mo ago
> even if a vendor is doing the right thing today, ... they could fail to realize that they were hacked last year. Sadly, the same issues apply to the copies of your private health data in your doctor's computer, your insurance company's computer, your hospital's computer, your pharmacy's computer, etc. Avoiding the app reduces the attack surface. With the minor moral victory of not having gone out of your way to make it easy for the enemies of your privacy.
- SoftTalker 3mo ago
  I avoid the medical establishment as much as I can, partly for this reason.
Terr_ 3mo ago
> they (or any intermediary) could change tomorrow. Adding to this, my understanding (IANAL) is that any promises to delete or limit sharing of your data could be swept-aside by a bankruptcy judge, putting priority on liquidating the company and its assets for the maximum amount of money for creditors. If well-intentioned operators erase your data before the company falls into the hands of the trustee or creditors, an unsympathetic legal-system could end up charging them with crimes for it.
fsflover 3mo ago
> I would never trust any private health data to an app. I don't care what promises or claims they make. If the app is free software, then you don't need to trust; you can verify instead. See: apps on F-Droid.
lepisma 3mo ago
[dead]

deleted 3mo ago

[deleted]

guilhas 3mo ago

On the other hand Why are so many women saying their periods are suddenly late or irregular? Experts explain https://dailynews.co.za/lifestyle/health/2026-07-14-why-are-so-many-women-saying-their-periods-are-suddenly-late-or-irregular-experts-explain/ https://dailynews.co.za/lifestyle/health/2026-07-14-why-are-... Your menstrual cycle may affect how well vaccines work https://www.newscientist.com/article/2532245-your-menstrual-cycle-may-affect-how-well-vaccines-work/ https://www.newscientist.com/article/2532245-your-menstrual-... COVID-19 vaccine 'disrupted the periods of thousands of women' - but changes 'short-lived' https://news.sky.com/story/covid-19-vaccine-disrupted-the-periods-of-thousands-of-women-but-changes-short-lived-12408621 https://news.sky.com/story/covid-19-vaccine-disrupted-the-pe... I always use open source apps, but at the same time I wonder how can my we all benefit from each other data respectfully of privacy, health or otherwise And anyway the data that the other 50 apps are collecting on most people phones can be used to infer most of this. Your locations, what you bought recently, what you searched online, which sites have you been, what you asked your chat bot, what you liked or viewed in social media...

like_any_other 3mo ago

Ctrl+F "open source", "free software": 0 results In contrast with the (single) mention of open-source on Mozilla's website that the BBC article cites: https://www.mozillafoundation.org/en/nothing-personal/period-ovulation-trackers/ https://www.mozillafoundation.org/en/nothing-personal/period... These articles are always so vague, never explaining the difference between proprietary and free software, and even treating sending data to company servers as some kind of acceptable default, only raising privacy alarms when the data is also sent (directly) to some 3rd party server. As if that makes any difference once the company has your data - they can sell it to whoever themselves.