In 2022, the conversation around period tracker privacy changed overnight. After the U.S. Supreme Court's Dobbs v. Jackson decision, millions of people started asking a simple question: who has access to my cycle data?
The answer, for most popular period apps, is unsettling.
The problem with cloud-based period trackers
Most period tracking apps use a standard SaaS model: you create an account, your data syncs to their servers, and they control what happens to it. This creates several risks:
Data subpoenas and law enforcement access
When your cycle data is stored on a company's servers, it can be subpoenaed by law enforcement. In 2023, a Nebraska court case demonstrated how a tech company's private messages were turned over to prosecutors in a case involving an alleged illegal abortion.1
Cycle data — period dates, pregnancy test results, fertility predictions — is equally accessible through legal process when it lives on someone else's servers.
Third-party analytics and advertising
An investigation by Privacy International found that several popular period tracking apps were sharing intimate health data with Facebook and other third parties without clear user consent.2 This included data on sexual activity, mood, and menstrual status.
Even when apps claim they "anonymize" data, research has shown that de-identification of health data is often reversible, especially when combined with other data points.3
Terms of service changes
Companies can change their privacy policies at any time. Data you shared under one set of rules can suddenly be governed by different ones. If a period tracking app is acquired, merges, or pivots its business model, your data goes with it.
What "on-device" actually means
A truly private cycle tracking app keeps all data on your phone's local storage. No account means no server-side database. No cloud sync means no remote copy of your data that can be subpoenaed, breached, or sold.
The key technical distinctions:
- No user accounts — no email, no password, no server-side identity
- No cloud database — cycle data, logs, and predictions live in local storage (Core Data, SQLite, etc.)
- No analytics SDKs — no Firebase Analytics, no Mixpanel, no Amplitude tracking your in-app behavior
- No third-party advertising — no ad networks with access to your health context
What about Apple HealthKit?
Apple HealthKit is on-device by default. When an app writes cycle data to HealthKit, that data is stored in Apple's encrypted health database on your iPhone. It only leaves your device if you explicitly enable iCloud Health sync — and even then, it's end-to-end encrypted and not accessible to Apple.4
This makes HealthKit integration fundamentally different from sending data to a company's cloud backend.
What to look for in a private period tracker
When evaluating a cycle tracking app's privacy claims, check for:
- No account creation required — if you need an email to use the app, there's a server involved
- No "sync across devices" feature — cross-device sync requires a cloud database
- Transparent privacy policy — the policy should explicitly state where data is stored and what SDKs are used
- No advertising — ad-supported apps inherently share data with ad networks
- Apple HealthKit as the only external integration — HealthKit data stays encrypted and on-device
The trade-offs
On-device privacy does come with limitations:
- No backup across devices — if you lose your phone without a backup, the data is gone
- No web dashboard — there's no server to host a web version
- No social features — sharing data with a partner requires a server
For most people tracking their cycle, these trade-offs are worth it. Your reproductive health data is among the most sensitive information you generate.
The bottom line
Privacy in cycle tracking isn't about having "nothing to hide." It's about controlling who has access to deeply personal health data in a legal and political environment that has demonstrated it can be used against you.
The simplest way to protect that data is to keep it on your device — where it's yours, fully and completely.
References
- Fowler GA. "Police can get your data — even from your period-tracking app." The Washington Post. 2023.
- Privacy International. "No Body's Business But Mine: How Menstruation Apps Are Sharing Your Data." 2019.
- Rocher L, Hendrickx JM, de Montjoye YA. Estimating the success of re-identifications in incomplete datasets using generative models. Nature Communications. 2019;10:3069.
- Apple Inc. "HealthKit Framework — Privacy." Apple Developer Documentation. 2024.