Study reveals that female health apps are mishandling highly sensitive data
Privacy Risks in Female Health Monitoring Apps: Research Findings and Recommendations
The privacy and safety risks associated with female health monitoring apps have been highlighted in a new research study conducted by King’s College London and University College London (UCL). The study, which evaluated the privacy practices of 20 popular female health apps, revealed concerning data handling practices that could put users at risk.
According to the research, many of these apps are coercing users into entering sensitive information, such as medical and fertility data, which could potentially be accessed by law enforcement or security authorities. This poses serious physical safety risks for users, especially in countries where certain health-related information could lead to legal consequences.
One of the key findings of the study was the lack of transparency in privacy policies and data safety labels of these apps. While some apps claimed not to share personal data with third parties, their privacy policies contradicted this statement, revealing a level of third-party sharing. Additionally, many apps linked users’ sexual and reproductive data to their Google searches or website visits, potentially leading to de-anonymization and assumptions about their fertility status.
Lead investigator Dr. Ruba Abu-Salma emphasized the importance of safeguarding users’ sensitive data and ensuring meaningful consent practices. The researchers also developed a resource to help developers improve privacy policies and practices of female health apps, calling for critical discussions on how these apps handle sensitive data.
Overall, the study sheds light on the need for better data management practices in female health apps to protect users’ privacy and safety. The findings will be presented at the ACM Conference on Human Factors in Computing Systems in 2024.