Their Privacy Policy[1] says that they're a member of the Safe Harbor scheme - which is supposed to provide "equivalent" protection for exported data. It includ

Their Privacy Policy[1] says that they're a member of the Safe Harbor scheme - which is supposed to provide "equivalent" protection for exported data. It includes the principle that users should have access to their information, albeit with a significant caveat: Individuals must have access to personal information about them that an organization holds and be able to correct, amend, or delete that information where it is inaccurate, except where the burden or expense of providing access would be disproportionate to the risks to the individual's privacy in the case in question, or where the rights of persons other than the individual would be violated It would be interesting to send them a request and see what their position is. [1] http://www.fitbit.com/uk/privacy http://www.fitbit.com/uk/privacy