guides
How We Rank Period Trackers: Our Methodology (2026)
Our ranking criteria for period tracker privacy. Architecture beats policy because structure is verifiable and promises are not.
Our five ranking criteria Every comparison, listicle, and alternative page on Floriva uses the same five criteria in the same priority order. We publish the methodology so readers can audit our ranking and apply it to apps we have not covered. 1. Data architecture. Where does cycle data live The ranking runs from strongest to weakest: on device only, end to end encrypted cloud (where the company cannot decrypt stored data), encrypted cloud (company holds the keys), plain cloud. On device storage means the company cannot breach, sell, subpoena respond, or SDK leak data it never received. Every tier below that adds exposure. 2. Enforcement history. Has the company faced FTC actions, class action settlements, or documented breaches Flo Health's January 2021 FTC consent order over sharing health data with Facebook and Google is the canonical example. The September 2025 $59.5M class action settlement (reported by Reuters and ClassAction.org on 2025 09 25) is the follow through. Zero incidents ranks above minor issues; both rank above a company under an active consent order. 3. Policy claims. What does the privacy policy actually permit, not what does the marketing page promise A policy