Is all that sensitive information you've shared with your favorite health and fitness apps and trackers at risk for falling into the wrong hands?
Smartphone apps are a beautiful invention: From tracking your workouts to helping you meditate, they can make life a helluva lot easier and healthier. But they also collect a treasure trove of personal information. And despite increasing scrutiny of privacy practices, many apps still do whatever they please with that info.
"There's really a big spectrum out there, [from] you effectively giving all of your data away to be used or sold to others, to [having] really strong protections on user privacy," says Nicholas Evans, Ph.D., a bioethicist at the University of Massachusetts Lowell.
The level of privacy you can expect depends on what kind of phone you have, where you live and, yes, how careful you are. Example: Evans says Apple requires iPhone health apps to be reviewed for privacy issues before going into the app store—so there's a layer of protection built in for users. But it's really only for health apps that work with Apple's built-in health app, says Evans. Stand-alone commercial tools and programs—think Fitbit, or Nike running apps—aren't regulated as well, meaning they may be using your information in ways that you never anticipated.
Why would companies auction off your info, regardless of privacy ethics? To put it bluntly, it's to make money. Think about it: Most of the apps you use are probably free, and they have to make money somehow. Selling data to other companies—like advertisers who want to target you with ads, and insurance companies that use info to set your premiums—is the way to bring in a profit, says Evans. And yes, it's likely that the app promises your name will be removed from any data they collect and sell. But by cross-indexing anonymous health data with other information floating on the Internet, it's not all that difficult for a data buyer to connect the dots and identify you. Yep, it's not just ex's who are stalking you online.
Keep in mind that apps aren't the only things collecting personal data, either. Your phone itself does too, and you can adjust the privacy settings to control an app's ability to get into sensitive data like your location, contacts, photos, and calendar, says Evans.
There's no doubt that health apps can be useful in helping you stay on track with a healthy lifestyle. But for now, it's up to you to decide whether that's worth the risk of trading your privacy. (After all, you probably wouldn't go around telling everyone your BMI, step count, heart rate, or your saved credit card information, now would you?) However, laws could be starting to catch up with technology—Evans says that European countries are implementing new laws that give individual users the ownership of and right to control their personal health data. While those laws aren't currently present in the U.S., he says it's only a matter of time before it hops over to this side of the Atlantic.