What did the FTC find Flo did wrong

The FTC found that between 2016 and 2019, Flo shared users' sensitive reproductive health information with Facebook, Google, and Flurry through embedded SDKs. This contradicted Flo's privacy policy, which stated user data would not be shared with third parties beyond what was required to operate the service. The FTC concluded this constituted an unfair and deceptive practice under Section 5 of the FTC Act.

Who was eligible for the Flo settlement payout

The class action covered US-based Flo app users whose data was shared with third parties during the period identified in the complaint. Specific eligibility criteria and per-person payout amounts were defined in the settlement terms. In class actions of this scale ($59.5M across millions of users), individual payouts are typically modest.

Did Meta face consequences for receiving Flo user data

Yes. On August 1, 2025, a jury in the Frasco v. Flo Health case found Meta liable for its role in receiving reproductive health data via the Facebook SDK. This was separate from the Google+Flo $56M settlement that closed in July 2025. The Meta verdict established that receiving improperly shared health data carries legal liability, not just sending it. Source: Labaton case page.

What is Anonymous Mode on Flo

Anonymous Mode is a feature Flo launched after the 2021 FTC enforcement action. It claims to decouple cycle data from user identity. Two problems: it requires a paid premium subscription, meaning basic privacy costs extra. And the underlying architecture is unchanged — data still resides on Flo's servers, which remain subject to subpoena regardless of anonymization.

guides

Flo Lawsuit Settlement: $59.5M Timeline Explained (2026)

FTC 2021: Flo shared reproductive data with Facebook and Google. 2025: $59.5M class action settled. What current Flo users should know now.

Flo's period tracker lawsuit is not just a headline about a payout. It is the clearest recent example of what happens when a cycle tracking app keeps intimate data on company servers, routes that data through third party SDKs, and then tries to clean it up after the fact. The short version is straightforward. The FTC said Flo shared reproductive health data with Facebook, Google, and Flurry despite making privacy promises to users. The settlements that followed reached a combined $59.5M. If you are deciding whether to keep using Flo, the key question is not whether the case settled. It is whether the product architecture changed enough to remove the company side data risk, which subpoena based requests continue to exploit. Timeline of the Flo Lawsuit January 2021: FTC Enforcement Action The Federal Trade Commission announced an enforcement action against Flo Health, Inc. The FTC found that between 2016 and 2019, Flo shared users' reproductive health information — period dates, pregnancy status, and health symptoms — with Facebook and Google via embedded third party SDKs. Flo's privacy policy at the time stated user data would not be shared with third parties except as needed to ope