Flo Health, Inc.
Menstruation and fertility tracker Flo Health shared app-users’ pregnancy intent and period-cycle data with Facebook, Google, and analytics firms despite assurances of privacy.
Case identifiers
- Respondent
- Flo Health, Inc.
- Agency
- Federal Trade Commission
- Announced
- 2021-01-13
- Monetary relief
- Injunctive only
- Case number
- FTC File No. 192-3133
- Statutes cited
- FTC Act § 5 (deceptive practices)
Key facts
- 1
Flo promised health information would be kept private but routed it to Facebook, Google Analytics, Fabric, AppsFlyer, and Flurry.
- 2
Shared data included event-level indications of pregnancy attempts and pregnancy status.
- 3
One FTC commissioner dissented, arguing the order was not strong enough.
- 4
Consent order without monetary relief; predates BetterHelp and GoodRx cases that expanded this theory.
What the order requires
Injunctive terms imposed by the Federal Trade Commission. These bind Flo Health, Inc.'s data practices going forward.
- Requirement to obtain affirmative consent before sharing health information.
- Duty to notify affected users of past disclosures.
- Required deletion of personal health information previously shared.
Primary sources
Read the original government documents. These are the authoritative records, everything on this page is derived from them.
Exercise your rights now
Generate a deletion request for $5
The FTC order binds Flo Health, Inc.'s future practices, but doesn't automatically delete your existing data. State privacy law (CCPA, CPA, TDPSA, VCDPA) gives you that right. OfflistMe generates a compliant deletion email pre-addressed to Flo Health, Inc.'s registered privacy contact.
Start for $5 →FAQ
What did the FTC charge Flo Health, Inc. with?+
Menstruation and fertility tracker Flo Health shared app-users’ pregnancy intent and period-cycle data with Facebook, Google, and analytics firms despite assurances of privacy. The Federal Trade Commission cited FTC Act § 5 (deceptive practices).
How much did Flo Health, Inc. pay?+
The 2021-01-13 order did not include monetary penalties against Flo Health, Inc.; the agency focused on injunctive relief (prohibiting certain practices going forward).
Does the Flo Health, Inc. settlement mean my data has been deleted?+
The order requires Flo Health, Inc. to delete certain categories of consumer data (see injunctive terms). Individual consumers should still exercise state-law deletion rights (CCPA, CPA, TDPSA) to confirm deletion from any remaining successor databases.
How can I read the original FTC order?+
The Federal Trade Commission press release is available at https://www.ftc.gov/news-events/news/press-releases/2021/01/ftc-finalizes-order-flo-health-fertility-tracking-app-shared-sensitive-health-data-facebook-google. The case / matter number is FTC File No. 192-3133.