A period tracker knows things about you that almost nothing else does: your cycle, your moods, your sex life, sometimes a pregnancy or a loss. Here’s the part that surprises people. Most of these apps are not covered by health privacy law, so what happens to that data comes down to a terms screen almost nobody reads. Regulators have already fined popular apps for quietly sharing this exact kind of information. The good news is that the warning signs are usually right there in the fine print. Here are eight to check before you tap Agree, and what a privacy-respecting app looks like instead.
You don’t need a law degree to spot these. Open the app’s privacy policy or terms, search for a few key words, and watch for the patterns below. Any one of them is worth a pause; several together is a reason to look elsewhere.
In Brief
The biggest red flags in a period app’s terms are vague sharing with “third parties” or “partners,” using your data for advertising, selling to data brokers, storing everything on the company’s servers with no on-device option, no end-to-end encryption, a broad law-enforcement disclosure clause, data that survives account deletion, and collecting far more than the app needs. The safer signs are on-device storage, real encryption, no data sales, and a clear, narrow policy. When in doubt, an app that keeps data on your phone is the strongest protection.
Red Flag vs. Safer Sign
| Red flag in the terms | Safer sign to look for |
|---|---|
| Shares with “third parties” | No sharing without your consent |
| Used for advertising | No ads, no data sales |
| Stored on their servers | On-device or local storage |
| No encryption mentioned | End-to-end encryption |
| Broad law-enforcement clause | Nothing to hand over |
1. It can share data with vague “third parties”
The most common red flag is language letting the app share data with unnamed “third parties,” “partners,” “service providers,” or “affiliates.” That phrasing is deliberately broad, and it’s how sensitive information ends up with companies you’ve never heard of. This isn’t hypothetical: the US Federal Trade Commission settled with the app Flo over disclosing users’ health data to outside analytics services after promising it wouldn’t. Look for a policy that says data is not shared without your explicit consent, and treat vague partner language as a warning.
2. Your data feeds advertising
If the terms mention using your information for advertising, marketing, or “personalized experiences,” your cycle data is being turned into an ad-targeting signal. Apps have shared where users are in their cycle, along with device and advertising identifiers, which lets other advertisers follow them across apps and the web. A privacy-respecting tracker makes its money from subscriptions, not from your data, and says plainly that it does not use your health information for ads.
3. It sells or shares data with brokers or for “research”
Watch for any clause about selling data, sharing it with data brokers, or providing “de-identified” or “aggregated” data for research or commercial partners. De-identified data can sometimes be re-linked to a person, and “research” is a broad word that can cover commercial data deals. Mozilla’s reviewers flagged 18 of 25 period and pregnancy apps they examined for privacy concerns. A clear “we do not sell your data” line is the sign you want.
4. Everything lives on their servers
Where your data lives shapes every other risk. If the app stores everything in its own cloud, that data can be breached, sold, or requested from the company. Apps that keep your entries on your device instead, with nothing synced to a company server by default, sidestep most of these problems, because there’s no central pile of cycle data to leak or hand over. Look for on-device or local storage, and be cautious of apps that require an account and full cloud sync just to work.
5. There’s no end-to-end encryption
Encryption decides who can actually read your logs. With end-to-end encryption, not even the app’s own staff can see your data. Without it, your entries may sit on a server in a form the company can read, share, or be compelled to produce. The terms or privacy page should say your data is encrypted, ideally end-to-end. If encryption isn’t mentioned at all, assume the company can read what you log, and weigh whether you’re comfortable with that.
6. The law-enforcement clause is broad
Almost every policy has a section about legal requests, and the wording matters. A vague clause saying the company may share data with authorities “as required” or “to comply with legal process” means your logs could be produced in response to a request. Mozilla’s reviewers noted that many of these apps use boilerplate with no clear limits on when data goes to law enforcement. The strongest protection here comes from design rather than a pledge: an app that stores nothing on its servers has nothing to hand over in the first place.
7. Deleting your account doesn’t delete your data
Check what happens when you leave. Some policies say they retain your data after you delete your account, keep it for a vague period, or hold “backups” indefinitely. That means walking away doesn’t actually remove your history. Look for a clear statement that deleting your account deletes your data, and ideally an in-app option to wipe your entries yourself. If the retention language is fuzzy, your information may outlive your use of the app.
8. It collects far more than it needs
A cycle tracker doesn’t need your precise location, your contacts, or a persistent advertising identifier to do its job. If the terms or the app’s permission requests reach for those, ask why. Overcollection is a signal that the data has a purpose beyond helping you, usually monetization. Check the app’s permissions in your phone settings and deny anything that isn’t clearly needed, and favor apps that ask for as little as possible.
How We Chose These
We focused on signals you can find yourself in an app’s terms or privacy policy, rather than technical audits you can’t run. The red flags reflect documented regulatory actions, including the FTC’s cases against period and fertility apps for undisclosed data sharing, and independent privacy reviews of the category. We paired each warning sign with the safer alternative to look for, and gave extra weight to storage and encryption, because where data lives and who can read it drive most of the real-world risk.
This article is general privacy information, not legal, medical, or security advice, and it does not recommend any specific app. Privacy policies and app features change, and laws differ by location, so review each app’s current terms and consider your own situation. For guidance specific to your circumstances, consult a qualified professional.
The Bottom Line
Your cycle data is some of the most personal information you’ll ever record, and with most period apps outside health privacy law, the terms screen is where its fate is decided. Search that screen for vague third-party sharing, advertising use, data sales, server storage, missing encryption, broad legal-request language, sticky retention, and overcollection. The safest apps keep your data on your device, encrypt it, sell nothing, and let you delete everything on demand. A minute of reading before you tap Agree is worth more than any promise buried in the policy. For a related look at app data, see our guide to the permissions school apps ask for, and the health section has more.
Frequently Asked Questions
What are the biggest privacy red flags in a period tracker app?
The main ones are terms that let the app share data with vague “third parties,” use your data for advertising, sell it to data brokers, store everything on company servers, skip encryption, include a broad law-enforcement disclosure clause, keep your data after you delete your account, or collect far more than the app needs. Any of these is worth a second look, and several together is a strong reason to choose a different app.
Are period tracker apps covered by HIPAA?
Usually not. Most period and fertility apps are not “covered entities” under HIPAA, so the health-privacy protections people assume apply often don’t. That means the app’s own privacy policy, not the law, governs what happens to your data. This is exactly why reading the terms matters, and why on-device apps that keep data off company servers offer stronger protection than a policy promise.
Is it safer to store period data on my device?
Yes, on-device storage is one of the strongest protections. If your entries stay on your phone and aren’t synced to a company’s servers, there’s no central database to be breached, sold, or produced in response to a legal request. Apps built around local storage, and options like a phone’s built-in encrypted health app or a password-protected offline note, give you far more control than a cloud-based tracker.
Can a period app be required to hand over my data?
If a company holds your data on its servers, it can potentially be compelled to share it through legal process, and many policies use broad language about complying with law enforcement. The most reliable safeguard is architectural: an app that stores nothing on its servers has nothing to turn over. When evaluating an app, check both its law-enforcement clause and where it says your data is stored.
How do I check a period app’s privacy before signing up?
Open the app’s privacy policy and terms and search for words like “third parties,” “advertising,” “sell,” “share,” “encryption,” “law enforcement,” and “delete.” Note whether data is stored on your device or their servers, and review the permissions the app requests in your phone settings. Independent privacy reviews of specific apps can help too. If the policy is vague or the app overreaches, pick one that’s clear and minimal.