Menopause apps have sold millions of women's intimate health data — and it is still happening

Millions of women are managing menopause with an app because they could not get a clinician to take them seriously. That is the real story underneath the privacy headlines: the data problem exists because the care gap exists.

Reporting by Lydia Spencer-Elliott has drawn attention to a pattern that regulators have been chasing for years — consumer menopause, cycle, and fertility apps passing sensitive health information to advertising and analytics third parties, and in some cases licensing it outright. The US Federal Trade Commission has brought enforcement actions against health apps for disclosing sensitive health data to advertising platforms without meaningful consent, and its Health Breach Notification Rule now explicitly covers consumer health apps that sit outside HIPAA.

Why intimate health data is a different category of risk

A leaked password can be rotated. A leaked pattern of symptoms cannot.

Menopause and cycle data can reveal, or allow a third party to infer:

• pregnancy, pregnancy loss, and fertility treatment
• menopause status and therefore approximate age and employability assumptions
• libido and sexual-health concerns
• depression, anxiety, and insomnia
• medication use, including hormone therapy and antidepressants

Once that leaves a clinical record it enters an inference economy. It can shape what advertisers show a woman, and in the worst cases what insurers, employers, and lenders assume about her. This is a socioeconomic security issue, not a preference setting.

The structural problem: free products need another revenue line

Most symptom trackers are free or freemium. Clinical care is not cheap to deliver, and neither is app development. When the user is not paying, revenue has to come from somewhere — advertising, partnerships, or data licensing. Some apps are scrupulous about this. Many are not, and the app store listing will not tell you which is which.

Two structural facts are worth knowing:

1. Most consumer wellness apps are not HIPAA-covered. HIPAA applies to healthcare providers, health plans, and their business associates. A direct-to-consumer app you pay for yourself is generally governed only by its own privacy policy plus consumer-protection law — which is why the FTC, not HHS, has brought most app-related actions.
2. "Anonymised" is doing a lot of work. Aggregated health datasets are frequently re-identifiable when combined with location, device, or purchase data.

Six questions to ask before you type a symptom into any app

1. Does the privacy policy contain the words "sell", "share for advertising", or "third-party partners" — and what exactly does that cover?
2. Are you a HIPAA-covered entity, or a consumer wellness app outside HIPAA?
3. Which advertising and analytics SDKs are in the app, and do they run on the symptom-entry screens?
4. Is my data used to train models or included in any aggregated dataset sold to third parties?
5. Can I export and permanently delete everything, and how long does deletion take, including backups?
6. If the company is acquired or shuts down, what happens to my health data?

If support cannot answer question 3 in one sentence, treat that as the answer.

How to reduce your exposure today

• Revoke health permissions for apps you no longer use, in your phone's privacy settings — deleting the app does not delete the account or the data already shared.
• Request deletion in writing. Email the privacy contact in the app store listing, name your account email, and ask for confirmation that data was removed from backups and that any downstream sharing has been revoked.
• Keep the most revealing entries out of ad-funded products. Fertility, pregnancy-loss, and mental-health details are the highest-consequence fields.
• Track on paper or in a private note for two cycles before a clinical visit. Frequency and severity are what a clinician acts on, and a notebook is unhackable.
• Treat prediction features as entertainment. No app can diagnose perimenopause. That is a clinical diagnosis from symptoms and menstrual history.

What a clinical practice can promise that an app usually cannot

When you see a licensed clinician, your symptoms become part of a clinical record used to treat you. A HIPAA-covered provider may use protected health information for treatment, payment, and operations — not to sell for advertising. That is a materially different legal frame from a wellness app's privacy policy, which can be amended by a version bump.

At Kindr we have written our commitments out in plain English on our privacy pledge: we do not sell or rent health data, and no advertising pixels or session-recording tools run on our intake, side-effect reporting, review, or account pages. That suppression is enforced in our site code, not just described in a policy.

The bigger fix

Apps filled a vacuum. The durable answer is not "delete your tracker" — it is making real menopause care accessible enough that women do not have to self-manage a decade of hormonal transition with a symptom chart and a search engine. Until then, be deliberate about where your data goes.

If your symptoms are affecting your sleep, work, or relationships, that is a clinical conversation, not a tracking exercise. See menopause app vs. doctor for what each one can actually do, and how to choose an HRT telehealth provider if you are ready for treatment.

Medically reviewed by Kindr Health Clinical Team
Kindr Health Inc. — Editorial & Clinical Team, led by Kevin Wolfe, CMO
NPI 1609792902 · Last reviewed: August 16, 2026