Quick Answer & Medical Summary
The question "when is your next period?" should belong to you and your doctor — not to an advertising algorithm, a data broker, or a legal subpoena.
Yet for millions of women, this data is being collected, stored in the cloud, and in some cases sold — without clear disclosure of who ultimately has access to it.
Most free period tracking apps are built on an advertising or data-licensing revenue model. The product is free because you — your health data, your behavioral patterns, your reproductive timeline — are the product.
A 2019 investigation by Privacy International found that period tracking apps were sharing intimate health data, including period dates, pregnancy intentions, and mood logs, directly with Facebook's advertising infrastructure — even when users were not logged into Facebook.
A 2022 Consumer Reports analysis of popular reproductive health apps found that several collected menstrual and fertility data and transmitted it to third-party analytics providers.
The types of data commonly collected and shared include:
- Menstrual cycle start and end dates
- Ovulation and fertile window predictions
- Pregnancy mode activation (signaling pregnancy attempts)
- Symptoms logged: cramps, mood, libido, discharge
- Device identifiers, IP address, and location
Why Reproductive Health Data Carries Unique Legal Risk
Cycle tracking data is uniquely sensitive in the current political and legal landscape. In jurisdictions where reproductive rights are restricted, menstrual data could theoretically be:
- Subpoenaed in criminal investigations related to pregnancy outcomes
- Sold by data brokers to law enforcement agencies
- Shared with employers or insurers in ways that affect coverage or employment
The American Civil Liberties Union (ACLU) and Electronic Frontier Foundation (EFF) have both issued guidance recommending that people use period tracking apps that store data locally on the device — not in the cloud.
What "Offline First" and "Zero Third-Party Tracking" Actually Mean
Offline First Architecture
An offline-first app stores all your health data locally on your smartphone. It does not require an internet connection to function and does not transmit your data to a remote server as part of its core operation. You remain in full control of your data at all times.
Zero Third-Party Tracking
This means the app contains no embedded SDKs (software development kits) from advertising networks, analytics platforms (Google Analytics, Facebook SDK, Amplitude), or data brokers. Everything logged in the app stays in the app.
What to Look For (and Red Flags to Avoid)
| Green Flags 🟢 | Red Flags 🔴 |
|---|---|
| Local-only data storage | Mandatory account creation |
| No account required | Data backed up to proprietary cloud |
| Open privacy policy with clear data inventory | Vague "we may share with partners" language |
| Optional Apple Health sync | SDK integrations with ad networks |
| No in-app advertising | Free app with unclear revenue model |
| Data export and deletion tools | No way to delete your account |
Apple Health Integration: Private Sync Done Right
Apple Health is fundamentally different from a cloud-based platform. Data stored in Apple Health:
- Lives on your iPhone in an encrypted local database
- Is governed by Apple's Health app permissions (you control what each app can read/write)
- Is never accessed by Apple for advertising
- Can be backed up to iCloud only with end-to-end encryption (when iCloud Backup encryption is enabled)
An app that optionally syncs with Apple Health — giving you the choice — is far safer than an app that requires its own cloud account.
EvaShark's Apple Health integration is entirely optional. Your cycle data, logged symptoms, and EvaShark predictions never touch EvaShark's servers unless you explicitly choose to enable it. For more on how EvaShark protects your data, see our guide on protecting your most intimate data.
5 Steps to Audit Your Current Period Tracker's Privacy
- Check the privacy policy — search for the words "share," "third party," "partner," and "advertise." If these appear without specific limits, be cautious.
- Check the app permissions on your phone — does it request location, contacts, or camera access? None of these are needed for cycle tracking.
- Search the app name + "data sharing" online — investigative reports often surface data-sharing practices that aren't disclosed prominently.
- Delete your account and data — test whether the app offers a clear, accessible way to permanently delete your account and all associated data.
- Check for advertising SDKs — tools like Exodus Privacy (for Android) or app privacy labels on the App Store (iOS) show which third-party trackers are embedded.
When Data Privacy Concerns Become Urgent
Take your data privacy especially seriously if you:
- Live in or travel to jurisdictions with restricted reproductive rights
- Are documenting a pregnancy loss, termination, or fertility treatment
- Share a family phone plan where usage data may be visible to others
- Work in fields where medical privacy matters professionally (healthcare, law, government)
EvaShark Biological Insight
