What My Period App Knows About Me: Predictions And Privacy

The Privacy Policy I Actually Read

The short answer to the title is uncomfortable: a period app can know your cycle dates, your symptoms, your moods, whether you are trying for a baby or avoiding one, and in documented cases some of that knowledge has been passed to advertising and analytics companies despite promises that it would stay private. This article is educational information only, not medical or legal advice. But privacy is a decision you make every time you tap accept, and it deserves the same clear eyes as the prediction on the screen.

I came to this sideways. My agency work in Multan involves reading the fine print on platforms most people scroll past, and while I was testing period apps for my family's calendar problem, the habit followed me home. I opened one very popular app's privacy policy and read it end to end, the way I would read a client's contract. Buried in the middle, in calm legal prose, sat the sentence that mattered: health data could be shared with analytics and marketing partners. The app's welcome screen had used the word private three times.

I am not naming that app here, because policies change and the point is larger than one company. The point is the gap between the promise on the download page and the permissions in the document nobody opens. That gap is where your data lives.

What A Period App Collects

Start with the obvious entries. Period start and end dates, cycle length, flow, cramps, headaches, mood, sleep, weight, skin, sexual activity, discharge, pregnancy tests, and whether this month is a trying month or a careful month. Add the account layer most apps ask for: an email address, sometimes a name and birth date, plus the device identifiers and rough location your phone hands to almost every app by default.

Read that list again and notice what it adds up to. It is not a diary of dates. Assembled over a year, it is a health record that can show a pregnancy before a woman has told anyone, a loss she has told no one, or a plan she is keeping inside her marriage. Data like that has commercial value precisely because it predicts life events, and predicting life events is what advertisers pay for. The collection is the business model question, not a side effect of it.

An app does not need to sell your name to sell your life. A pattern of dates, attached to a device, is already a person.

Where The Data Went: The Flo Case

This is not suspicion. It is a settled public record. In January 2021 the U.S. Federal Trade Commission announced that Flo Health, maker of a period and ovulation tracker used by more than 100 million people, had settled allegations that it shared users' health information with outside analytics providers after promising the information would be kept private. The complaint named the analytics divisions of Facebook and Google, Google's Fabric service, AppsFlyer, and Flurry. The data moved as app events, and the FTC said it included facts as sensitive as a user's pregnancy.

Two details in the case stay with me. The sharing stopped only after a newspaper exposed it in February 2019 and hundreds of users complained. And the settlement did not just demand better behavior going forward. Flo had to notify affected users and instruct every third party that received the health data to destroy it. Regulators do not order destruction of data that was handled carefully.

My family's story began with the opposite problem, three apps giving three different answers, which I told in The Wall Calendar Article. The privacy question is the second half of that story. An app can be wrong about your dates and loose with your data at the same time, and the second failure is the one you cannot undo by switching apps later.

What Mozilla Found Across 25 Products

One company's settlement could be called an exception, so Mozilla's researchers tested the field. In 2022 the Mozilla Foundation reviewed 25 reproductive health apps and wearable devices for its Privacy Not Included guide. Eighteen of the 25 earned the guide's privacy warning label. Eight failed to meet even Mozilla's minimum security standards. And across most of the apps, the policies did not say clearly what could be shared with law enforcement, which is the question that matters most when the data is a pregnancy record.

Seven products out of 25 came through without a warning label, so this is not an argument that every tracker is careless. It is an argument that care is not the default, and that a reader cannot tell the careful seven from the careless eighteen by looking at star ratings or download counts. She has to read, or choose a tool that gives her nothing to worry about.

Three Ways To Track, Compared

The reader I wrote this for is standing where my family stood: choosing between an app account, a simpler tool, and paper. Here is the comparison as I now lay it out at home.

Notice that the prediction quality barely separates these rows. The calendar rule behind most predictions is the same arithmetic, and this site's calculator runs it in your browser from the dates you type, with no account and nothing stored. What separates the rows is custody. Whose building does your record sleep in, and who holds the keys?

One more thing belongs in this section, because privacy talk can crowd it out. However you track, the tracking serves a method with real limits. Calendar methods fail more often than most contraception, an app's prediction does not make any day guaranteed safe, and a contraception decision that matters deserves a doctor or a clinic, not a download. A private record of a weak method is still a weak method.

The Rule My House Uses Now

My rule after that policy read is one I now apply to every tracker I am asked about: the most private tracker is the one that never asks your name. At home that means paper on the wall for the record, a no-account calculator for the arithmetic, and apps only after their policies survive a full read, word by word, the way I read that one.

The paper family has one more member worth naming: The Standard Days Method And The String Of Beads, a tracker made of beads on a string that asks for no account at all.

If you keep an app, keep it like an auditor. Read the sharing section of the policy before the first cycle, not after the first headline. Turn off advertising identifiers on the phone. Refuse optional permissions the predictions do not need, like contacts and precise location. And once a year, read the policy again, because the document you accepted is allowed to change, and the change is rarely announced with the same energy as a new feature.

The quiet data habits of phones reach further than cycle tracking, and the same audit instinct applies to the apps that measure your connection, your files, and your bills; it is why I built the data usage calculator to run without an account too. Your cycle record is among the most personal data you will ever type into a screen. Choose its home accordingly.