Is Clue safer than Flo for period tracking privacy

Clue has a meaningfully better privacy track record than Flo. Clue has no FTC consent decree, no documented sharing of in-app health data with Facebook or Google for advertising, and GDPR jurisdiction provides structural legal protection. But Clue stores data on company servers, shares technical data with advertising networks on an opt-out basis, and its privacy policy permits disclosure for legal requirements. Flo's post-FTC reforms (Anonymous Mode, dual ISO 27001/27701 certification) have narrowed the gap on paper, though Flo's history of sharing health data with advertisers remains a permanent mark.

Does on-device storage eliminate the risks documented in Clue's investigations

Yes, structurally. The Norwegian Consumer Council findings, the data broker purchases, and the Mozilla warnings all depend on data existing on company servers and flowing to third parties. An on-device-only period tracker has no server-side data to share with 135 companies, no advertising IDs to appear in data broker inventories, and no server-side passwords to evaluate. The risks documented in Clue's case cannot exist when the data never leaves the device.

guides

Clue Says It Won't Comply With Subpoenas: The Evidence

Clue pledges GDPR protection and defiance of law enforcement. Investigations found 135 third-party data recipients and opt-out ad sharing.

The Pledge After the Dobbs decision in June 2022, Clue's co CEOs Carrie Walter and Audrey Tsang published a statement: "We promise you that we will never turn your private health data over to any authority that could use it against you." In November 2024, CEO Rhiannon White stated on TikTok: "If we are ever subpoenaed, we will not comply." These are strong public commitments. They are also statements from executives, not legal guarantees. Clue's actual privacy policy says something different. The question is what happens when the pledge meets a court order. Norwegian Consumer Council "Out of Control" (January 2020) The Norwegian Consumer Council published its "Out of Control" report in January 2020, analyzing data practices across ten popular apps. Clue was among them. The report found that these ten apps collectively fed user data to at least 135 third party advertising and profiling companies. The data shared included Android Advertising IDs, IP addresses, device identifiers, and demographic information. These identifiers allow advertising networks to build profiles of individual users across apps and websites. An Advertising ID linked to a period tracking app tells the ad networ