Is Your Period Tracking Data Private? A 5-Minute Audit

Cycle data is unusually sensitive — it can imply pregnancy, pregnancy loss, fertility treatment, health conditions and sexual activity. It is also unusually casual to hand over: most people tap through an onboarding flow in under a minute without ever learning where the data ends up.

This is a five-minute audit you can run on any tracker, including ours. No legal expertise needed.

First, understand the three storage models

Most large period trackers are server-stored, because that model supports accounts, web apps, cross-platform sync and — for some — advertising. None of that is inherently sinister. It just means a copy exists outside your control, and copies are what get shared.

That risk is not hypothetical

Two public enforcement records make the point better than any argument:

• In January 2021 the US Federal Trade Commission announced a settlement with Flo Health over allegations that it shared users’ health data with third parties including Facebook and Google despite promising to keep it private. The order was finalised in June 2021 and required affirmative consent before sharing health data, an independent privacy review, and notification of affected users.
• In May 2023 the FTC settled with Easy Healthcare, maker of the Premom app, over allegations it shared users’ health information with third parties through software development kits — including a $100,000 civil penalty and a permanent ban on sharing personal health data for advertising.

In both cases the data left because the data was there to leave. That is the whole argument for caring about the storage model rather than the promises.

The seven questions — and how to check each one

1. Does it force me to create an account?

An account almost always implies a server, and a server implies a copy. Check by installing and looking at the first screen: is there a "continue without an account" path?

2. What does the App Store privacy label say?

Scroll to App Privacyon the App Store listing. "Data Not Collected" is the strongest possible answer. If you see Health & Fitness or Sensitive Infounder "Data Linked to You," the developer is telling Apple it receives that data tied to your identity.

3. Does the privacy policy name third parties?

Search the policy for third part, partner, analytics, advertis and affiliate. Vague phrasing like "we may share with trusted partners to improve our services" is doing a lot of quiet work.

4. Is there advertising anywhere in the app?

Ads generally require an advertising SDK, and advertising SDKs are how health data has historically leaked. A subscription-funded app has no structural reason to carry one.

5. Can I export and delete everything?

Look for a data export (CSV or similar) and a genuine "delete all my data" control in settings — not just "delete account," which sometimes means deactivation. Export also means you are not locked in.

6. What happens if the company is acquired or shuts down?

Search the policy for merger or acquisition. Almost every server-stored app lists user data as an asset that transfers with the business. Worth knowing before you log five years of cycles.

7. What is the minimum it needs to know?

A tracker that reads your cycle from Apple Health does not need your email, your location, your contacts or your name. Every extra field is extra exposure for no functional gain.

Where Apple Health fits

Apple Health data is encrypted on device and — when iCloud sync is on — in transit and on Apple’s servers. Apps only see the categories you explicitly grant, and you can revoke any of them at any time in Settings → Privacy & Security → Health.

One honest caveat: granting an app read access to your menstrual data means that app can then do whatever its own policy permits with what it reads. Apple’s guarantees cover Apple’s storage, not the app’s. So the storage-model question survives even for a HealthKit-based app — which is exactly why it is question one.

Where Phase stands

We would rather be checkable than reassuring, so here are the specifics you can verify yourself:

• No servers. There is no Phase backend. There is nowhere for your data to be sent, because nothing was built to receive it.
• No accounts. You never give us an email address. Sync happens through your own private iCloud, using your Apple account, not ours.
• No analytics or advertising SDKs. The only network traffic is Apple’s own StoreKit for the subscription.
• App Store label: Data Not Collected. That is the claim we filed with Apple, and it is the one you should hold us to.
• Export and delete built in — CSV export and a delete-all control in Settings.
• Full detail in our privacy policy.

This is also why Phase reads from Apple Health rather than asking you to keep a second period log: the fewer places your cycle exists, the fewer places it can go. If you are comparing options, the workout tracker comparison covers the feature side of the same decision.

This article is general information about app privacy practices, not legal advice. Enforcement records referenced above are public FTC announcements; settlements are not findings of liability.