The developer of Flo, a period and fertility tracking app used by more than 100 million women, on Wednesday settled federal charges that it misled users about its computing practices by sharing their intimate health data shared with Facebook and Google.
Instead, according to federal regulators, Flo shared confidential health data from millions of users with numerous third parties for years – including the analytics units from Facebook and Google as well as two mobile analytics services, AppsFlyer and Flurry. The private data included information on user periods, pregnancies and births, the complaint said.
In addition, Flo set no limits on the use of health information for women by Facebook, Google and other companies, according to the federal supervisory authorities, and given third parties the opportunity to use the data for advertising and other purposes.
The proposed state rule prohibits the app’s developer, Flo Health, from misleading users about their data processing practices. Flo must also obtain user consent before sharing their health information and obtain an independent review of its privacy practices.