The scale at which some fitness apps collect significant amounts of data on users, including those who may share information with so-called ‘data collectors’, has been revealed by new analysis.
The data collected includes people’s precise locations and financial information in the photos they take. In fact, seven of the 10 apps analyzed collected photos from users, and five collected users’ exact current location.
The vast majority of users will likely know that the apps on their phones legally store certain personal information, such as email addresses and names. But the lengthy Terms and Conditions that come with every download mean they may not realize how much information they’re giving away.
What data do apps collect?
Researchers at data protection service Incogni analyzed 10 apps in the Google Play Store on March 27: Strava, Fitbit, AllTrails, Calm, Flo, Runna, MyFitnessPal, Headspace, Calorie Counter, ShutEye.
They pointed out the wide range of user information that apps collect and share (such as Exact location, Name, Email, Health information, Fitness information, Photos, App interactions, Other user-generated content, Other actions, Crash logs, Diagnostics, Other app). performance data, Device or other IDs).
The results showed that fitness apps Fitbit and Strava collected the most personal information, and all but three apps (Fitbit, Fl, Calorie Counter) shared data with third parties.
Running coach app Runna collected 13 data points and shared them all with third parties such as ‘data brokers’, including users’ precise location, name and email addresses, photos, and health and fitness information. Hiking app AllTrails collected and shared eight data points about people who use it.
Seven of the 10 apps analyzed collected users’ photos (FitBit, Strava, AllTrails, Flo, Calorie Counter, Runna, MyFitnessPal), and five collected their exact current location (Fitbit, Strava, AllTrails, Runna, MyFitnessPal). This means app developers can ‘see’ where people go on a regular basis, even their homes.
Fitbit was found to collect the most data points about its users, collecting 21 different types of information. Strava collected 19 different species.
Should we be worried?
Data collection is something users need to be aware of. Brokers may collect information from apps, social networking sites and collate it with other publicly available information; This data can even be used in background checks by employers or checks by insurance companies.
Darius Belejevas, head of data protection service Incogni, comments: “Apps that record and track exercise data can be a great motivator, with millions of Brits using them to get more out of their exercise, eat better, go running or stay active. But most of us Without realizing it, we are giving away personal data that not only shows us how many calories we have consumed or the steps we have walked, but also where and when we took those steps.
“Sensitive, personal health and fitness information is extremely valuable to data brokers because there are hundreds of interested parties, both legal and illegal, who are willing to pay for such information, including insurance companies and marketers. “It is particularly concerning that some apps collect ‘other information’ and ‘other user-generated content’ without specifying what these vague terms include.”
Gaël Duval, co-founder and developer of privacy-focused operating system /e/OS, said: “Many of these apps are marketed as ‘free’, but people don’t realize that their data is now valid. Free and paid apps will ask for certain permissions during installation that allow them to collect your data and sell it to data brokers. This is often disguised as part of the app’s functionality, but in reality the data is then transferred or sold to data brokers, who in turn sell it for advertising purposes and more.
“Data brokers collect/analyze user data from various sources to create a detailed profile about a person and sell it for profit. The data collected about you in apps can range from things like age and location to medical information and your sexual interests. “It is then used to build an accurate picture of your habits, allowing advertisers and big tech to deliver increasingly relevant content and product recommendations, encouraging you to spend more time and money online, to the detriment of your mental health and finances.”
Yahoo News has reached out to the practices for comment.
Which apps collect what?
fitbit
21 data points collected
0 shared with third parties
Strava: Run, Cycle, Walk
19 data points collected
3 Shared with third parties (Crash logs, Diagnostics, Device or other IDs)
AllTrails: Hiking, Biking and Running
18 data points collected
8 shared with third parties (Exact location, Approximate location, Name, Email, User IDs, Purchase history, App interactions, Device or other IDs)
Calm – Sleep, Meditate, Relax
16 data points collected
6 shared with third parties (Email, User IDs, User payment information, Purchase history, App interactions, Device or other IDs)
Flo Period and Pregnancy Tracking
15 data points collected
0 shared with third parties
Runna: Running Plans and Coach
13 data points collected
13 shared with third parties (Exact location, Name, Email, Health information, Fitness information, Photos, App interactions, Other user-generated content, Other actions, Crash logs, Diagnostics, Other app performance data, Device or other IDs)
MyFitnessPal: Calorie Counter
12 data points collected
3 shared with third parties (Exact location, User IDs, Devices or other IDs)
Headspace: Meditation and Sleep
9 data points collected
7 shared with third parties (Name, Email, User IDs, App interactions, Crash logs, Diagnostics, Device or other IDs)
Counts calories
13 data points collected
0 shared with third parties
ShutEye: Sleep and Relax
1 data point collected
2 shared with third parties (User IDs, Device or other IDs)