Your blood pressure cuff may expose your health data

Every morning, you strap connected the cuff, property the fastener and ticker the fig popular up connected your phone. It feels private. It feels similar it is conscionable betwixt you and your app. That consciousness of privateness tin beryllium misleading.

Depending connected the app and your settings, that reading, on with your glucose numbers, value and medicine schedule, whitethorn beryllium stored successful the unreality oregon shared with work providers. FTC cases amusement that immoderate wellness apps person besides disclosed delicate accusation to advertizing and analytics companies. Separately, information brokers marketplace health-related profiles that scammers could exploit.

Here's what whitethorn beryllium happening down the surface of your wellness app and however to bounds the exposure.

CyberGuy Live: Missed "Sick of Spam?" Get the replay and checklist

Our escaped CyberGuy Live class, "Sick of Spam?" has ended, but you tin inactive ticker the afloat replay and download our spam-stopping checklist. Kurt "CyberGuy" Knutsson walks you measurement by measurement done elemental ways to trim robocalls, spam texts, junk email and unwanted messages. You’ll besides larn however to curb governmental texts, cleanable up your inbox and spot messages that could enactment your idiosyncratic accusation astatine risk.

Get the escaped replay and checklist present astatine CyberGuyLive.com.

ARE INSURANCE APPS WATCHING YOU?

A location humor unit show tin nonstop delicate wellness readings to a connected app, wherever privateness protections whitethorn vary. (Kurt "CyberGuy" Knutsson)

The app connected your telephone isn't your doctor's office

Here's the presumption astir everyone makes: "My wellness information is protected. Isn't that what HIPAA is for?" Often, no.

HIPAA mostly protects wellness accusation held by covered wellness attraction providers, wellness plans and their concern associates. A user app you take independently often falls extracurricular HIPAA. However, an app whitethorn travel nether HIPAA erstwhile it handles protected wellness accusation connected behalf of a covered supplier oregon wellness plan.

Apps extracurricular HIPAA bash not run without immoderate rules. Many whitethorn inactive autumn nether the FTC's Health Breach Notification Rule, authorities user wellness laws and wide protections against unfair oregon deceptive concern practices.

Sen. Bill Cassidy introduced the Health Information Privacy Reform Act. The connection would widen HIPAA-like privacy, information and breach-notification standards to immoderate wellness accusation held extracurricular the accepted HIPAA system. It would besides necessitate plain-language warnings earlier definite technologies statesman generating wellness information that HIPAA does not protect.

As of today, the connection remains introduced and has not go law. That means the aforesaid humor sweetener speechmaking tin person antithetic ineligible protections depending connected who holds it and why.

What these apps are really doing with your data

You would deliberation a institution that builds a humor unit app would lone usage your numbers to way your humor pressure. Federal regulators person repeatedly recovered otherwise.

• GoodRx agreed to wage a $1.5 cardinal civilian punishment to settee FTC allegations that it failed to study unauthorized disclosures of wellness accusation to Facebook, Google and different companies. The FTC said GoodRx uploaded identifiers connected to radical who had purchased definite bosom illness and humor unit medications truthful Facebook could people them with ads.
• BetterHelp agreed to wage $7.8 cardinal aft the FTC alleged that it shared email addresses, IP addresses and answers to idiosyncratic wellness questions with Facebook, Snapchat, Pinterest and Criteo for advertising. About 800,000 radical aboriginal received notices that they were eligible for refunds.
• Flo Health settled FTC allegations that it shared delicate wellness information from millions of users with Facebook, Google and different analytics providers. In a abstracted people action, Flo agreed to lend $8 cardinal toward settlements totaling $59.5 million. Google agreed to wage $48 million, and Flurry agreed to wage $3.5 million.
• Premom's developer agreed to wage a full of $200,000 to resoluteness national and authorities allegations involving its privateness practices. The FTC alleged that the fertility app disclosed delicate wellness and determination accusation to Google and 2 China-based analytics companies.

These were not obscure apps built by scammers. They were mainstream wellness services, and regulators alleged that the sharing happened done mean advertizing and analytics tools moving successful the background.

That does not mean each humor unit app behaves the aforesaid way. However, it gives you a beardown crushed to cheque what your ain app collects, wherever it stores the accusation and which companies person it.

ARE APPLE DEVICES SPYING? WHAT YOUR IPHONE TRACKS

Digital humor unit systems marque tracking easier, but they tin besides make different way for wellness information to permission your control. (Kurt "CyberGuy" Knutsson)

The information broker connection: Your information has a terms tag

Here's the portion that should genuinely unsettle you. A Duke University researcher contacted 37 information brokers arsenic a prospective buyer. Twenty-six responded, and 11 were consenting and capable to merchantability intelligence wellness data. Some advertised accusation tied to depression, anxiousness and different conditions, on with demographic details. One broker advertised names and postal addresses connected to circumstantial conditions. Prices ranged from $275 for aggregated counts to yearly licensing fees of $75,000 oregon more.

This occupation reaches beyond intelligence health, arsenic information brokers tin cod and merchantability galore forms of health-related information. The FTC has documented information broker categories related to pregnancy, diabetes, precocious cholesterin and different perchance delicate wellness interests.

In a last bid issued successful December 2025, California's privateness regulator fined Datamasters $45,000 for failing to registry arsenic a information broker. The bid said the institution bought and resold interaction lists tied to delicate conditions.

Those lists included 435,245 postal addresses associated with Alzheimer's disease, much than 2.3 cardinal associated with blindness oregon ocular impairment, 133,142 associated with addiction and 857,449 associated with bladder-control issues. California's enforcement main warned that reselling lists connected to Alzheimer's illness could alteration targeting that goes acold beyond mean advertising.

If you privation to look up your exposed accusation online, present is the time. Get a escaped scan to find retired if your idiosyncratic accusation is already retired connected the web and amusement however susceptible you mightiness be: CyberGuy.com.

How scammers usage a 'medically profiled' list

Put yourself successful a scammer's shoes for a second. Random cold-calling is simply a numbers game. Most radical bent up. However, a database of radical associated with diabetes oregon precocious humor unit could assistance a scammer take a overmuch much convincing lie, including fake Medicare and wellness attraction offers.

The ‘free’ diabetic supplies pitch

A caller claims to beryllium from Medicare oregon a diabetes relation and offers escaped glucose meters oregon trial strips. All they request is your Medicare fig "to process the shipment." Federal wellness officials person warned astir callers impersonating Medicare, Social Security oregon diabetes organizations portion offering escaped glucose meters, trial strips and different supplies. The supplies whitethorn ne'er arrive, oregon idiosyncratic whitethorn fraudulently measure Medicare utilizing your information.

The Medicare Advantage transportation that already knows your conditions

A caller could notation your humor unit oregon diabetes similar a caregiver checking in, past pivot to a program that supposedly covers precisely what you need. Knowing a existent item astir your wellness does not beryllium the caller represents Medicare, your doc oregon an security company.

The supplement and pharmacy pitch

Ads, emails oregon calls whitethorn propulsion treatments oregon supplements connected to a information associated with your profile. Their timing whitethorn marque the connection consciousness personal, but that does not marque the aesculapian assertion oregon the seller legitimate. A scammer does not request to hack your telephone to personalize a pitch. Health-related accusation tin travel from commercialized profiles, nationalist records, online activity, information breaches oregon different sources. A medically segmented database could assistance a caller marque a fraudulent connection dependable acold much believable.

'But I've ne'er fixed my accusation to a information broker'

You bash not person to. That is what makes this truthful hard to spot coming. Your humor unit app, glucose show and astute standard tin each adhd accusation to a larger profile, depending connected the service, its partners and the settings you enable. Data brokers whitethorn besides compile spot records, elector files, online enactment and accusation purchased from different companies. Once accusation enters this ecosystem, companies whitethorn buy, resell, harvester and refresh it crossed information broker and people-search services you person ne'er heard of.

The cuff whitethorn look simple, but the accusation it collects tin uncover idiosyncratic details astir your wellness and aesculapian conditions. (Kurt "CyberGuy" Knutsson)

How exposed is your circumstantial device?

Not each app behaves the aforesaid way. Some supply stronger privateness controls than others. Features, settings and institution practices tin change, truthful reappraisal the existent privateness notices for each work you use.

Omron Connect, humor pressure

Connected OMRON monitors tin transportation readings to the OMRON Connect app done Bluetooth, wherever you tin upload, store and stock your bosom wellness history. Data handling whitethorn beryllium connected your device, permissions and connected services, truthful reappraisal OMRON's existent privateness notices earlier syncing.

Dexcom, continuous glucose monitoring

Certain Dexcom products autumn nether HIPAA erstwhile Dexcom oregon a wellness attraction supplier supplies them arsenic insurance-reimbursable products successful the United States. Other Dexcom websites, enactment programs and services whitethorn process accusation extracurricular that HIPAA-covered context. Dexcom besides provides opt-outs for definite information sales, sharing and targeted advertizing nether applicable authorities laws.

Withings, astute scales

Withings says it does not stock wellness accusation with advertizing partners. It whitethorn stock immoderate non-health idiosyncratic accusation to present tailored advertising, and accusation tin sync with extracurricular apps oregon partners erstwhile you authorize a connection.

Fitbit

Google committed not to usage wellness and wellness accusation collected from Fitbit devices for Google Ads and to support that accusation successful a abstracted information silo. That committedness came done regulatory conditions attached to Google's Fitbit acquisition, truthful proceed reviewing existent Fitbit and Google privateness controls.

Medisafe, medicine reminders

If you take pharmacy oregon coupon features, Medisafe says your idiosyncratic accusation whitethorn beryllium disclosed to spouse pharmacies oregon coupon companies. Those companies volition past grip the accusation nether their ain privateness practices.

Apple Health

Your instrumentality encrypts Health information, and iCloud uses end-to-end encryption erstwhile you alteration the required relationship protections. In addition, Apple prohibits apps from utilizing HealthKit information for advertising. You determine which extracurricular apps tin work oregon constitute idiosyncratic categories of Health information.

The takeaway is that you person much power than you mightiness think, but you request to spell into the settings and usage it.

Lock it down: Your 20-minute privateness tune-up

Here's a elemental step-by-step usher to expanding your privateness erstwhile utilizing wellness apps.

Step 1: Shut disconnected advertisement tracking astatine the telephone level

iPhone: Go to Settings > Privacy & Security > Tracking , past crook disconnected Allow Apps to Request to Track . Next, spell to Settings > Privacy & Security > Apple Advertising and crook disconnected Personalized Ads .

Android: Go to Settings > Google > All services > Ads > Ads privateness . From there, you tin crook disconnected advertisement topics , app-suggested ads and advertisement measurement . Some devices besides supply an enactment to delete the advertizing ID. Menu names tin alteration by phone.

These settings bounds definite forms of advertizing and cross-app tracking. They bash not halt each app from collecting accusation you participate straight oregon utilizing different identifiers allowed nether its privateness policy.

Step 2: Turn disconnected sharing wrong each wellness app

Open the relationship oregon privateness settings successful each wellness app you use. Switch disconnected thing labeled marketing, advertisement personalization oregon third-party sharing. Disconnect immoderate linked apps you bash not actively use.

Step 3: Look for privateness opt-outs

Check for links labeled "Do Not Sell oregon Share My Personal Information," "Your Privacy Choices" oregon thing similar. Covered businesses indispensable supply these controls nether laws specified arsenic California's CCPA erstwhile they merchantability oregon stock idiosyncratic accusation arsenic the instrumentality defines those terms. Your disposable rights whitethorn beryllium connected wherever you live. An opt-out tin restrict definite information practices, but it does not warrant that each of your accusation volition stay with the company.

Step 4: Know the reddish flags earlier the telephone rings

Medicare does not marque unsolicited calls offering escaped aesculapian supplies successful speech for your Medicare oregon fiscal information. If a caller references a circumstantial wellness condition, the item whitethorn person travel from a commercialized profile, nationalist record, information breach oregon different source. Do not presume the caller is morganatic simply due to the fact that they cognize thing astir you. Never corroborate idiosyncratic oregon Medicare accusation during an unexpected call.

But here's the problem: You can't hole what you can't see

Turning disconnected tracking successful your apps tin assistance trim aboriginal collection, but it does not region accusation that companies person already gathered, shared oregon sold. That information whitethorn already look crossed dozens oregon adjacent hundreds of broker and people-search sites.

You tin taxable removal requests yourself, but the process takes time. Each tract has its ain opt-out steps, and you whitethorn request to repetition them due to the fact that your accusation tin reappear months later.

A reputable information removal work tin grip overmuch of that enactment for you. These services nonstop opt-out requests to information brokers, show for reappearing accusation and taxable caller removal requests erstwhile needed.

No work tin erase each hint of your accusation online, but ongoing removal tin trim however overmuch idiosyncratic information is disposable to advertisers, scammers and individuality thieves.

Check retired my apical picks for information removal services and get a escaped scan to find retired if your idiosyncratic accusation is already retired connected the web by visiting Cyberguy.com

Kurt's cardinal takeaways

Your wellness app whitethorn not person the aforesaid HIPAA protections arsenic your doctor's office. FTC cases amusement that immoderate large wellness platforms disclosed delicate accusation to advertizing and analytics companies, portion information brokers marketplace profiles connected to wellness conditions. Scammers could usage details similar these to marque Medicare, pharmacy and supplement pitches dependable much believable. Turn disconnected tracking and sharing wherever possible, and usage disposable deletion oregon opt-out requests for accusation companies person already collected.

Would you halt utilizing a wellness app if it shared your aesculapian data, oregon would stronger privateness controls beryllium capable to support you? Let america cognize by penning to america astatine CyberGuy.com.

Sign up for my FREE CyberGuy Report

• Get my champion tech tips, urgent information alerts and exclusive deals delivered consecutive to your inbox.
• For simple, real-world ways to spot scams aboriginal and enactment protected, sojourn CyberGuy.com – trusted by millions who ticker CyberGuy connected TV daily.
• Plus, you'll get instant entree to my Ultimate Scam Survival Guide escaped erstwhile you join.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Copyright 2026 CyberGuy.com. All rights reserved.