{"url":"https://news.bloomberglaw.com/litigation/period-tracking-app-flo-settles-ftc-data-sharing-allegations","title":"Flo Settles FTC Suit Over Health Data Sharing","domain":"news.bloomberglaw.com","imageUrl":"https://images.pexels.com/photos/4428994/pexels-photo-4428994.jpeg?auto=compress&cs=tinysrgb&h=650&w=940","pexelsSearchTerm":"period tracker app","category":"Tech","language":"en","slug":"8a2b349b","id":"8a2b349b-b0f7-4889-83c9-7f0d9073e4e5","description":"Flo-FTC Settlement: Flo Health Inc. settled Federal Trade Commission allegations of sharing users' sensitive health data with third parties despite privacy","summary":"## TL;DR\n- **Flo-FTC Settlement:** Flo Health Inc. settled Federal Trade Commission allegations of sharing users' sensitive health data with third parties despite privacy promises.[[1]](https://news.bloomberglaw.com/litigation/period-tracking-app-flo-settles-ftc-data-sharing-allegations)[[2]](https://www.ftc.gov/news-events/news/press-releases/2021/01/developer-popular-womens-fertility-tracking-app-settles-ftc-allegations-it-misled-consumers-about)\n- **Key Obligations:** Company must notify affected users of the data disclosure and direct third parties like Google and Facebook analytics to delete the information.[[1]](https://news.bloomberglaw.com/litigation/period-tracking-app-flo-settles-ftc-data-sharing-allegations)[[2]](https://www.ftc.gov/news-events/news/press-releases/2021/01/developer-popular-womens-fertility-tracking-app-settles-ftc-allegations-it-misled-consumers-about)\n- **Privacy Enforcement:** Action underscores regulator worries over women's health apps mishandling intimate details on cycles and fertility.[[1]](https://news.bloomberglaw.com/litigation/period-tracking-app-flo-settles-ftc-data-sharing-allegations)\n\n## The story at a glance\nFlo Health Inc., maker of the Flo period and fertility tracking app, reached a proposed settlement with the Federal Trade Commission over charges that it shared users' sensitive health data—like menstrual cycles and pregnancies—with data analytics firms such as Facebook, Google, AppsFlyer, and Flurry, despite privacy policy claims to the contrary. The article covers this enforcement action from Bloomberg Law reporter Jake Holland. It is being reported now amid rising scrutiny of health app data practices, following a 2019 Wall Street Journal expose.[[3]](https://www.nytimes.com/2021/01/13/business/flo-privacy.html)\n\n## Key points\n- Flo app, used by millions of women, promised not to share details on marked cycles, pregnancy, symptoms, or notes with third parties.\n- From at least 2016 to early 2019, Flo disclosed custom app events revealing users' reproductive health to analytics providers without limits on their use.[[2]](https://www.ftc.gov/news-events/news/press-releases/2021/01/developer-popular-womens-fertility-tracking-app-settles-ftc-allegations-it-misled-consumers-about)\n- FTC alleged these practices misled users, violating promises in Flo's privacy policies.\n- Proposed settlement bars future misrepresentations on data handling and requires independent privacy program review.\n- Flo must alert users via the app about past sharing and tell recipients—including Facebook and Google analytics—to destroy the data.[[1]](https://news.bloomberglaw.com/litigation/period-tracking-app-flo-settles-ftc-data-sharing-allegations)\n\n## Details and context\nThe settlement stemmed from reports that Flo transmitted identifying health signals through app interactions, allowing third parties broad access under standard terms. No monetary penalty was imposed; instead, emphasis fell on notification and consent reforms. Privacy advocates have flagged risks in women's health apps, which collect highly personal data on menstruation, fertility, and sex amid weak federal rules like HIPAA often not applying to non-medical developers.[[3]](https://www.nytimes.com/2021/01/13/business/flo-privacy.html)\n\nThis FTC move followed public complaints after media coverage of Flo's practices. The order awaits public comment before finalization, with commissioners split on adequacy—some concurring but dissenting on stronger remedies.[[2]](https://www.ftc.gov/news-events/news/press-releases/2021/01/developer-popular-womens-fertility-tracking-app-settles-ftc-allegations-it-misled-consumers-about)\n\n## Key quotes\n“The settlement highlights growing concerns among privacy advocates, attorneys general, and regulators about the security and transparency of women's health applications that track intimate data like menstruation cycles and sexual activity.” — Bloomberg Law article.[[1]](https://news.bloomberglaw.com/litigation/period-tracking-app-flo-settles-ftc-data-sharing-allegations)\n\n## Why it matters\nHealth apps hold uniquely sensitive reproductive data vulnerable to misuse in advertising or breaches, especially post privacy scandals. App users face risks of targeted ads or data exposure without recourse, while developers must now prove privacy claims through audits and consents. Watch FTC enforcement trends on digital health and any user lawsuits building on this precedent.\n\n## What changed\nFlo previously shared users' period and pregnancy data with analytics firms like Facebook and Google without restrictions. The settlement now requires user notice, third-party data destruction, consent for future sharing, and privacy audits. Changes took effect with the proposed order announced January 13, 2021, finalized June 22, 2021.[[4]](https://www.ftc.gov/news-events/news/press-releases/2021/06/ftc-finalizes-order-flo-health-fertility-tracking-app-shared-sensitive-health-data-facebook-google)\n\n## FAQ\nQ: What data did Flo share with third parties?\nA: Flo shared custom app events tied to users' identities revealing menstrual cycles, fertility status, pregnancies, symptoms, and notes. These went to analytics tools from Google, Facebook, AppsFlyer, and Flurry between 2016 and 2019. The company did not restrict how recipients could use the information.\n\nQ: What must Flo do under the settlement?\nA: Flo must notify affected users in the app about the past sharing and instruct third parties to destroy the data. It also needs users' affirmative consent before any future health data sharing and an independent privacy review. Misrepresentations about data practices are prohibited.\n\nQ: Why did the FTC pursue Flo?\nA: FTC found Flo's privacy policies promised no sharing of health details like cycles or pregnancies with third parties, but the app disclosed them anyway. Public complaints after press reports prompted the probe. Flo neither admitted nor denied the claims.\n\nQ: Does the settlement include a fine?\nA: No monetary penalty or consumer redress was required. Focus was on behavioral changes like notice, consent, and audits to prevent recurrence.\n\n\n\n\n\n\n\n[[1]](https://news.bloomberglaw.com/litigation/period-tracking-app-flo-settles-ftc-data-sharing-allegations)[[2]](https://www.ftc.gov/news-events/news/press-releases/2021/01/developer-popular-womens-fertility-tracking-app-settles-ftc-allegations-it-misled-consumers-about)","hashtags":["#privacy","#ftc","#healthapps","#data-sharing","#womenshealth","#tech-regulation"],"sources":[{"url":"https://news.bloomberglaw.com/litigation/period-tracking-app-flo-settles-ftc-data-sharing-allegations","title":"Original article"},{"url":"https://www.ftc.gov/news-events/news/press-releases/2021/01/developer-popular-womens-fertility-tracking-app-settles-ftc-allegations-it-misled-consumers-about","title":""},{"url":"https://www.nytimes.com/2021/01/13/business/flo-privacy.html","title":""},{"url":"https://www.ftc.gov/news-events/news/press-releases/2021/06/ftc-finalizes-order-flo-health-fertility-tracking-app-shared-sensitive-health-data-facebook-google","title":""}],"viewCount":2,"publishedAt":"2026-04-21T15:30:38.192Z","createdAt":"2026-04-21T15:30:38.192Z","articlePublishedAt":"2021-01-13T18:51:02.000Z"}