Meta found guilty for collecting period-tracking data of millions of women

In a landmark decision regarding privacy rights, Meta has been held accountable for improperly gathering sensitive menstrual and fertility information from users of the Flo app without their explicit consent. This ruling stems from a class-action lawsuit initiated in 2021, which represents over 3.7 million users in the United States who used the app between November 2016 and February 2019. The lawsuit unveiled that Meta's software development kit (SDK) integrated into the Flo app transmitted 'App Event' data back to Facebook when users interacted with specific features, particularly those concerning fertility, such as the 'trying to get pregnant' section. This data encompassed sensitive information including period dates, sexual activity, and mental health notes. Despite Meta's claims that it never accessed personal health data and that it prohibits developers from transmitting such details, the jury found otherwise. Lead attorneys for the plaintiffs, Michael P. Canty and Carol C. Villegas, stated, "This verdict sends a clear message about the protection of digital health data and the responsibilities of Big Tech. Companies like Meta that covertly profit from users’ most intimate information must be held accountable." While other defendants in the lawsuit, such as Google, Flo, and analytics firms like AppsFlyer and Flurry, reached settlements out of court, Meta stood alone in contesting the trial. In reaction to the verdict, a Meta spokesperson expressed strong disagreement with the outcome and indicated that the company is considering all available legal options. They emphasized, "User privacy is important to Meta, which is why we do not want health or other sensitive information, and why our terms prohibit developers from sending any." Affected users will receive notifications via email or through the official lawsuit website, though details regarding compensation or further steps remain undecided. This case has sparked broader discussions about the management of digital health data, highlighting critical concerns about transparency, user consent, and the ownership of sensitive personal information in the tech industry.