Scanning your connection...
Back to Glossary
Emerging Threats

What is Wearable Data Privacy?

The privacy risks of fitness trackers, smartwatches, smart rings, and health wearables that collect intimate biometric and behavioral data — heart rate, sleep patterns, location, stress levels, and menstrual cycles.

Also known as: Fitness Tracker Privacy, Smartwatch Privacy, Health Wearable Privacy

Wearable devices collect the most intimate data possible — your body's continuous biological signals. This data reveals far more than you realize.

What Wearables Collect

Biometric Data

  • Heart rate (continuous)
  • Heart rate variability (stress indicator)
  • Blood oxygen levels
  • Skin temperature
  • Electrodermal activity (stress/emotional state)
  • ECG readings
  • Blood pressure (newer devices)

Behavioral Data

  • Step count and activity levels
  • Sleep patterns (duration, stages, disruptions)
  • GPS location (continuous during exercise, often all day)
  • Menstrual cycle tracking (period, symptoms, intimacy)
  • Stress levels (inferred from biometrics)
  • Workout types and performance

Contextual Data

  • Time of day for all activities
  • Social interactions (proximity to other devices)
  • Altitude, weather conditions during activities
  • Phone notifications and responses

Why This Data Is Sensitive

  • Insurance companies want access to health and activity data for risk assessment
  • Employers can use wellness program data to identify health risks
  • Law enforcement has subpoenaed Fitbit data in criminal cases
  • Menstrual tracking data could be used to infer pregnancy in jurisdictions that restrict abortion
  • Heart rate data can reveal emotional states, substance use, and medical conditions
  • Location data reveals where you exercise, sleep, and spend time

Who Has the Data

Company Data Use Ownership
Apple (Apple Watch) On-device processing focus, health data encrypted Apple's strongest privacy stance
Google (Fitbit) Advertising ecosystem Google acquired Fitbit's data trove
Garmin Third-party sharing, ransomware target (2020 attack) Device-focused company
Samsung (Galaxy Watch) Samsung ecosystem, partner sharing Samsung's privacy ecosystem
Oura Researched-focused, some third-party sharing Independent company
Whoop Subscription model, data analysis Aggregated data insights

Notable Incidents

  • Fitbit acquisition by Google (2021): Google gained access to millions of users' health data
  • Strava heat map (2018): Revealed military base locations from soldiers' exercise routes
  • Garmin ransomware (2020): $10M ransom paid; all user data potentially exposed
  • Period tracking apps post-Dobbs: Concerns about data being used for prosecution

How to Protect Yourself

  1. Choose Apple Watch if privacy is a priority — Apple's health data architecture is the most privacy-preserving
  2. Disable continuous GPS — Only enable during workouts if needed
  3. Don't share health data with employer wellness programs
  4. Review third-party access — Check which apps have access to your health data
  5. Use offline-first devices — Some fitness trackers work without cloud accounts
  6. Read the privacy policy before buying — What data goes to the cloud? Can you opt out?
  7. Be cautious with period tracking — Use privacy-focused alternatives (Drip, Euki) that store data locally
  8. Disable social features — Sharing workouts publicly reveals location patterns

Related Terms

Have more questions?

Use our guided flow to get the right next privacy step for Wearable Data Privacy.

Open Guided Flow