The Data Economy of Period Tracking Apps
How reproductive health signals became high-value behavioral data, and why long-term retention creates privacy and security risks
A High-Value Signal
In digital advertising, not all data is valued equally.
Basic demographic information such as age, gender, or location has relatively limited commercial value on its own. By contrast, indicators that signal a major upcoming life change are far more valuable, because they predict future purchasing behavior.
Pregnancy is one of the strongest signals in the consumer data economy.
Industry analysts estimate that pregnancy-related data can be worth up to 200 times more than basic demographic attributes. The reason is straightforward: a pregnancy reliably precedes significant spending on healthcare, consumer goods, childcare, insurance, housing, and long-term services.
This economic incentive explains why period and fertility tracking apps collect detailed information about cycles, symptoms, ovulation timing, mood, sexual activity, and conception intent. These data points are not only useful for personal tracking. They are also commercially predictive.
This intersection of health data and advertising infrastructure is commonly referred to as “femtech,” a sector projected to exceed $60 billion globally within the decade.
How Period Tracking Apps Collect Data
Most period tracking apps are not regulated as medical devices and are not covered by U.S. health privacy laws such as HIPAA.
Instead, they operate within the consumer app ecosystem. That means data collection practices are governed primarily by:
- App privacy policies
- Platform rules (such as Apple and Google app store policies)
- General consumer protection law
- Advertising technology norms
As a result, many apps integrate third-party software development kits (SDKs) for analytics, attribution, and advertising. These SDKs can transmit information to external companies when users:
- Open the app
- Log a period or symptom
- Indicate pregnancy intent
- Miss a predicted cycle
In many cases, these transmissions occur automatically and are linked to persistent device identifiers, enabling cross-app and cross-platform tracking.
The Flo Case Study
In 2019, reporting by the Wall Street Journal revealed that Flo Health, one of the most widely used period tracking apps, had shared sensitive user health data with Facebook through Facebook’s SDK.
According to the reporting:
- Period logs triggered data sharing events
- Pregnancy intent indicators were transmitted
- Symptom and health-related inputs were shared
- The data was linked to users’ Facebook identities
This enabled targeted advertising based on reproductive health signals.
Flo later stated that the data was used for analytics and attribution purposes. However, the investigation demonstrated how health-related inputs could be repurposed within advertising systems.
The FTC Settlement
Following the reporting, the Federal Trade Commission investigated Flo’s data practices.
In January 2021, the FTC announced a settlement requiring Flo to:
- Obtain affirmative consent before sharing health data
- Notify users of past sharing practices
- Undergo independent privacy assessments
The settlement did not include a monetary penalty and did not prohibit Flo from operating. Instead, it focused on forward-looking compliance commitments.
Importantly, the case did not address broader industry practices. Other period tracking apps continued operating under similar business models, often with different combinations of third-party integrations.
Why Pregnancy Data Is So Valuable
Advertising systems prioritize timing.
A person who is about to make large, predictable purchases is more valuable to advertisers than someone with stable consumption patterns. Pregnancy reliably signals upcoming expenditures that can exceed $20,000 to $50,000 in the first year alone.
From an advertising perspective, early detection matters. Capturing a user’s attention before major purchasing decisions begin allows brands to establish loyalty and influence long-term spending.
Period tracking apps provide early indicators such as:
- Cycle regularity changes
- Ovulation predictions
- Logged symptoms
- Missed periods
- Fertility planning inputs
Each data point increases confidence in predictive models.
Independent Research Findings
The Flo investigation was not an isolated incident.
In 2019, Privacy International analyzed popular period tracking apps and found that a majority shared data with Facebook or other third parties immediately upon app launch, before any user input.
The shared information included:
- App usage events
- Device identifiers
- Behavioral metadata
- In some cases, health-related signals
This demonstrated that even passive app use could generate data flows beyond the user’s expectations.
Long-Term Retention and Context Change
A key risk in health-related data collection is context change.
Data collected for one purpose can become sensitive under different legal, social, or enforcement environments. Unlike short-lived analytics logs, reproductive health data is often retained for long periods and backed up across multiple systems.
This creates exposure when:
- Laws or regulations change
- Data is subpoenaed or requested by authorities
- Companies are acquired or restructure data practices
- Databases are breached or leaked
- Data is sold or shared downstream
Once collected, historical data cannot be made uncollectable. Deletion policies are unevenly enforced, and users often have limited visibility into how many copies exist.
Law Enforcement and Legal Access
In multiple jurisdictions, law enforcement agencies have issued guidance reminding officers that digital records, including app data, may be relevant during investigations.
This includes:
- App logs
- Search histories
- Location records
- Health tracking data
Even in regions where reproductive healthcare remains legal, data retention introduces investigatory risk when records are accessible through legal process or third-party intermediaries.
The issue is not limited to period tracking apps. It reflects a broader pattern in which consumer data collected for convenience or personalization later becomes subject to uses never anticipated by the individual.
The Role of Employers and Insurers
Some reproductive health apps are offered through employers as part of wellness or benefits programs.
These platforms may provide aggregated reporting to employers about:
- Pregnancy rates
- Trimester distribution
- Health engagement metrics
- Utilization of support resources
While companies often state that data is anonymized and aggregated, small teams or specific roles can reduce practical anonymity.
In parallel, insurers and benefits administrators increasingly seek predictive signals related to healthcare utilization and risk modeling.
Inference Without Direct Tracking
Even individuals who do not use period tracking apps may still generate reproductive health inferences.
Data brokers and advertising systems infer pregnancy status using signals such as:
- Purchase histories (prenatal vitamins, tests, maternity clothing)
- Location visits (OB-GYN offices, prenatal classes)
- App download patterns
- Search queries
These inferred attributes can be as actionable as directly reported data.
Which Design Choices Reduce Risk
Privacy researchers have identified several design patterns that reduce exposure:
- Local-only data storage
- No account requirement
- No third-party SDKs
- Open-source codebases
- Clear deletion controls
Examples of apps that emphasize local storage include Drip, Euki, and Periodical. These apps store data on the device rather than centralized servers.
Analog tracking methods, such as paper calendars, eliminate digital exposure entirely.
What Users Can Do
Individuals concerned about reproductive data privacy may consider the following steps:
- Review app privacy policies and SDK disclosures
- Request copies of stored data where legally available
- Delete accounts and request data deletion
- Limit app permissions
- Avoid linking health apps to advertising or social media accounts
- Use local-storage-only tools when possible
These steps do not eliminate systemic data collection, but they can reduce individual exposure.
The Structural Issue
Period tracking apps illustrate a broader structural problem in the data economy.
Sensitive health signals are collected outside medical privacy frameworks, monetized through advertising infrastructure, and retained indefinitely. When conditions change, the data remains.
The issue is not limited to one app or one company. It reflects how consumer technology, advertising incentives, and weak privacy regulation intersect.
The Bottom Line
Period tracking apps were designed to offer convenience and insight. Many users adopted them in good faith to better understand their bodies.
At the same time, reproductive health data has become one of the most commercially valuable behavioral signals in the digital economy. Once collected, it enters systems optimized for reuse, resale, and long-term retention.
When intimate biological data is treated as a marketing input rather than protected health information, users bear the downstream risk.
Understanding how these systems work is a first step toward making informed choices about what data to generate, where to store it, and who ultimately controls it.
Sources: Wall Street Journal reporting on Flo Health (2019); Federal Trade Commission settlement with Flo Health (2021); Privacy International analysis of period tracking apps (2019); Consumer Reports and EFF guidance on reproductive data privacy; industry analyses of femtech and digital advertising markets.