Live data from Hacker News

Period tracking app, Flo, found to be selling user data to Meta

femtechdesigndesk.substack.com

71–80 of 285 posts

Re: Period tracking app, Flo, found to be selling user data to Meta

#71
post #19

I don’t have the right configuration of equipment to use an app like this, but does anyone know why this needs to be a service-driven app? What piece of functionality requires a server to track your health?

I have actually been playing around with scoping a privacy first version of these tracking apps that store all the data locally with optional sync. It's technically possible, but there's very little in the way of revenue generation there. So it's same issue as always, capitalism corrupts.

Re: Period tracking app, Flo, found to be selling user data to Meta

#72
post #64

Does anyone happen to know if Meta and Google have ever recovered these judgements from the app developers? All of the industry terms of service specifically forbid SDK licensees from sending sensitive personal data to the platforms, and they require the licensee to indemnify the platform against any judgement that arises from violating those terms. See Meta's statement on this verdict, which seems pretty reasonable…

I mean this seems like an attempt at a get out of jail free card. If meta didnt want this info, why are they accepting and processing it?

Re: Period tracking app, Flo, found to be selling user data to Meta

#73

I don't actually see this as a problem, and instead it's a PSA everyone needs to internalize: If you put data onto a networked device it may be sent to some place else. If you don't want your data being shared: Use a device that does not have any networking capability (both hardware and software wise) Use a pen and paper, you can shred and destroy as you see fit. If you're using an application on a mobile device with…

Also: if you are not paying the service provider for the service, you are not their customer - you are their product.

Flo isn't free though, you have to pay a weekly/yearly subscription to use it.

Re: Period tracking app, Flo, found to be selling user data to Meta

#74
post #19

I don’t have the right configuration of equipment to use an app like this, but does anyone know why this needs to be a service-driven app? What piece of functionality requires a server to track your health?

My partner uses the app this article is about (Flo) and I have an account there too in order for her to share the data with me.

I guess you could do it with some sort of P2P sync with cryptography involved locally instead, and/or E2E for stuff sent via the servers. Kind of surprised me they didn't have E2E already, but I guess I shouldn't be surprised anymore.

Re: Period tracking app, Flo, found to be selling user data to Meta

#75
post #56

Earlier quoted context omitted.

If you stop having a period for a few months and then start again, it may be worth buying some location data during that time to see if you were near any medical offices that may have offered illegal abortion services.

Could they get a warrant for that data anyway?

You can't (in theory) get a warrant "just because", you need to state the grounds for the search in your application for a warrant.

Re: Period tracking app, Flo, found to be selling user data to Meta

#76
post #56

Earlier quoted context omitted.

If you stop having a period for a few months and then start again, it may be worth buying some location data during that time to see if you were near any medical offices that may have offered illegal abortion services.

Could they get a warrant for that data anyway?

Why get a warrant when you can just buy it?

This whole data economy has significantly undermined privacy, including 4th amendment protections.

Re: Period tracking app, Flo, found to be selling user data to Meta

#77
post #19

I don’t have the right configuration of equipment to use an app like this, but does anyone know why this needs to be a service-driven app? What piece of functionality requires a server to track your health?

The spying part requires a server. If you use GrapheneOS, you can enable or disable internet access for each app.

> If you use GrapheneOS, you can enable or disable internet access for each app.

Not sure what information you're expecting the app in question to surface if you disable internet access for it.

Re: Period tracking app, Flo, found to be selling user data to Meta

#78
post #61

Earlier quoted context omitted.

Fined into bankruptcy and all managers up to and including the CEO criminally charged.

There needs to be penalties that piece the "limited liability" because otherwise it's just "pay to get away with it" as we currently have. I've been for a "corporate death penalty" (if companies are people, they can be executed) which would result in the shareholders losing everything along with executives being perp-walked.

Not just executives. They don't will these things into existence. Someone had to build functionality to send user data to Facebook.

Re: Period tracking app, Flo, found to be selling user data to Meta

#79
post #44

> It seems like we can’t just necessarily leave it up to companies – or their ragtag teams of crackpot lawyers rewriting privacy policies every few months – to keep our private data private. It's not a medical requirement from a doctor, so just keep a diary if you want to. Not everything needs to be an app. All the money spent on regulations and regulators to cover increasingly niche opt-in services that are entirely…

I've never used Flo specifically, so I don't know what kind of data analysis it has available, but period data is the #1 most useful health data to have an app crunch for you, and "your period starts tomorrow" is a pretty darn useful notification to get.

We're using Flo specifically, mostly for sharing stuff like "her period starts tomorrow" to the both of us, she doesn't really need a notification for that :)

Re: Period tracking app, Flo, found to be selling user data to Meta

#80
post #62
post #19

I don’t have the right configuration of equipment to use an app like this, but does anyone know why this needs to be a service-driven app? What piece of functionality requires a server to track your health?

I'm not familiar with this app, but a service lets you do potentially nice things like cross device sync and sharing observations with trusted others.

I'm assuming the question should be further refined to "why does the service need to know the data". The things that you mention could be done with the service only having the encrypted blob.
Post reply on HN