Popular period tracker apps used by millions of women are sharing sensitive personal information such as monthly timings, contraception use, symptoms, mood, and sexual life to Facebook.<\/p>\n
Some of the apps, including Maya and MIA Fem: Ovulation Calculator, have millions of downloads on the\u00a0Google Play Store. They are also available for the iPhone.<\/p>\n
\u201cThe data you share with your menstruation app is probably information you would not share with others,\u201d Privacy Internation noted.<\/p>\n
The data sharing happens via Facebook\u2019s software development kit (SDK) that gives app creators a\u00a0full range of tools to develop apps tailored to Android and iOS. Facebook Business Tools, such as tracking pixels, and Like and Share buttons that you\u00a0see on sites across the web also send data automatically to the social media giant.<\/p>\n
Sharing intimate medical data<\/h3>\n
Given the confidential nature of medical data, the idea that your blood pressure, mood and sexual life is shared with a third-party \u2014 Facebook or otherwise \u2014 without seeking explicit informed consent\u00a0is a cause for concern.<\/p>\n
In response, Maya, Pinkbird, and Grupo Familia have removed the offending SDK from its apps. Facebook, for its part, puts the onus on app makers not to break platform rules or misuse its developer tools to collect private information. But it\u2019s not clear whether Facebook has directly benefited from such data sharing in the first place.<\/p>\n
\u201cOur Terms require the app developer to be clear with their users about the information they are sharing with us and to have a lawful basis for the disclosure and use of data,\u201d Facebook said in a statement.<\/p>\n The detailed investigation undertaken by Privacy International (PI) builds on a similar study undertaken by the UK-based non-profit watchdog last December. The findings disclosed how widely-used Android apps like Duolingo, Yelp, Spotify, Skyscanner, and KAYAK automatically transferred data to Facebook the moment a user opens the app, whether or not that individual has a Facebook account, or if they are logged in or not.<\/p>\n That the apps were sending data to Facebook without a user\u2019s consent and without proper disclosure notwithstanding, The Wall Street Journal revealed the behavior extended to iOS, despite Apple\u2019s stringent privacy rules and protections.<\/p>\n \u201cThere is a reason why advertisers are so interested in your mood; understanding when a person is in a vulnerable state of mind means you can strategically target them,\u201d PI noted.<\/p>\n Marketers can then use this information to strategically target ads to them based on their moods, not least when they are pregnant, as they are most likely to change their purchasing habits.<\/p>\n As far as data collection and sharing practices go, this is where it gets murky. Most companies aren\u2019t upfront about what kinds of data they collect and for what purpose \u2014 instead resorting to dense legalese and vague phrases like \u201cpersonalization\u201d and \u201cbetter customer experience.\u201d<\/p>\n MIA Fem, for example, recommends articles to read based on your sex habits. \u201cWe selected \u2018masturbated\u2019 in the section on sex and were recommended an article called \u2018Masturbation: What You Want to Know But Are Ashamed to Ask\u2019,\u201d PI said in its report, which was then shared with Facebook.<\/p>\n The apps\u2018 behavior once again raises questions about how much users can knowingly agree to such personal information being shared with third-parties like Facebook, especially when online services have lengthy terms of service that most tend to gloss over or decide not to read at all.<\/p>\n It\u2019s also been repeatedly established that privacy policies are nothing but sophisticated traps. As Mikko Hypponen, the Chief Research Officer (CRO) at F-Secure, once said, \u201cIt doesn\u2019t matter what it says in the policy. Nobody reads them.\u201d<\/p>\n But tech companies have been repeatedly protected by their dubious privacy policies, furthering the wealth of personal data available to them. Moreover, the advent of EU GDPR guidelines for data protection has created a peculiar divide, with companies setting different privacy standards for their EU customers and their non-EU customers.<\/p>\n In this digital era, trading personal information for convenience seems to be de rigueur \u2014\u200aand that\u2019s assuming people understand they\u2019re making an exchange at all.<\/p>\n But privacy isn\u2019t all-or-nothing, and it isn\u2019t one-size-fits-all. What matters is that you, as a user, have the ability to understand how your data is used, and control over whether it is used in a manner that\u2019s in line with your expectations.<\/p>\n I will close with a final word from Steve Jobs, who famously said:<\/p>\n Privacy means people know what they\u2019re signing up for, in plain English and repeatedly. I believe people are smart and some people want to share more data than other people do. Ask them. Ask them every time. Make them tell you to stop asking them if they get tired of your asking them. Let them know precisely what you\u2019re going to do with their data.<\/p>\n<\/blockquote>\n It\u2019s been almost 10 years since he uttered those words, but the fact that we\u2019re still discussing about privacy policies and terms of service even now shows how little the needle has shifted on privacy.<\/p>\n<\/p><\/div>\n![\"\"](\"https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2019\/09\/Maya-796x409.png\")
The GDPR divide<\/h3>\n
![\"\"](\"https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2019\/09\/MIA-Fem-796x387.png\")
\n