Period tracking app refuses to disclose data to American authorities

submitted 3 weeks ago by ForgottenFlux@lemmy.world

www.newsweek.com/period-tracking-app-refuses-di…

The team behind menstrual health and period tracking app Clue has said it will not disclose users' data to American authorities, following Donald Trump's reelection.

The message comes in response to concerns that during Trump's second presidency, abortion bans that followed the overturn of Roe v. Wade in 2022 will worsen and states will attempt to increase menstrual surveillance in order to further restrict access to terminations.

807
2

Log in to comment

134 Comments

Newsweek has reached out to Clue, the Trump campaign and Youngkin for comment via email.

3 weeks ago

Research conducted by the Mozilla Foundation indicates that the app referred to in the article, Clue, gathers extensive information and shares certain data with third parties for advertising, marketing, and research reasons.

Here are some menstruation tracking apps that are open-source and prioritize user privacy by keeping your data stored locally on your device:
- drip
- Mensinator
- Bluemoon

So the government just needs to acquire this data from one of those third parties if it wants it.

3 weeks ago

Drip doesn't save anything to the cloud, it's all local to your device. I can't speak to the others.

Which does mean one has to backup and manually move your tracking history to a new device. Guess who forgot to do that 😂

Good idea is to use something like Syncthing to copy data between your phone and another device like a laptop or another phone. This depends on the app, for Drip you have to manually export the data yourself on a regular basis.

Another useful idea is if you have an old phone lying around get it connected via Syncthing and back up everything to it. If your current phone dies or is lost you can switch back immediately, a hot backup. If you have root on your device you can use NeoBackup to schedule backups of the data into a folder Syncthing can access and send to backup locations, say a home computer or spare device.

God I wish I could learn more about this shit.

For all of the Linux and FOSS nerds on Lemmy, I don't think I've seen one make a guide on how to have good digital stewardship of oneself. Syncthing sounds freaking awesome. Still feel like there's a barrier to entry for me though

What OS do you use? Windows, Mac, Linux? And same for your phone? Android? If so, you should be able to get it set up on your desktop and phone.

First, get it installed on your desktop. For windows and mac go to the Syncthing download page and grab the installer. On Linux you will find install instructing below, but basically use your package manager to install syncthing.

Once it is installed you can start it up and it will open a GUI, most likely through your web browser (probably 127.0.0.1:8384 or similar). From here you will have your Syncthing interface for your computer set up, so on to the phone.

On your phone install syncthing from whichever store you use, fdroid is my favourite. Once installed open it and you should have an option to add another device. You can use this to scan the QR code on your computer Syncthing interface.

3 weeks ago

It would be nice if it did have some automatic backup solution. Backup options could be something like Nextcloud, or some local server. Maybe even android backup but the data has to be encrypted with a password and be an opt in feature.

3 weeks ago , edited 3 weeks ago

so what they're really saying is they won't give it away for free

They do claim to not share any medical data with third parties though. See other comments for source.

I wouldn't trust them either way...

I hadn't seen this comment, thanks for making it.

3 weeks ago

The only way to protect data is to not gather it.

Having your own data can be incredibly useful and valuable, the trick is protecting that data so that nefarious actors can't use it.

3 weeks ago

Sure, but tracking period data can be very helpful for people. For a threat model of abortion criminalisation (or maybe trans healthcare criminalisation with treatments stopping periods, or really any kind of restrictions on medical autonomy), encryption at rest of locally stored period data is perfectly sufficient. They are not going to send military intelligence agencies after a random person having an abortion. It is actually a relatively low threat model, like equivalent to buying drugs online or something like that.

3 weeks ago

I mostly mean having data stored in a centralized database owned by a corporation. Since even if it’s encrypted you’re just one warrant away from the data being handed over.

3 weeks ago

If only the user has the key then there's no real concern with the data being handed over

3 weeks ago , edited a week ago

Deleted by author

reply
1
3 weeks ago

They say that, but when Ken Paxton subpoenas them they will say they have no choice. It would be better to use an app that doesn't store this data server side at all.

FOSS Period Tracking Apps Exist: (there may be others, as well)

https://fossdroid.com/a/bluemoon.html

https://fossdroid.com/a/mensinator.html

https://github.com/TotallyMonica/foss-period-tracker

Also paper and pencil.

Also the oldest known "writing" is a stick with 28 notches on it.

3 weeks ago , edited 3 weeks ago

How does an app being FOSS defend them from warrants?

Edit. Thank you guys for the details. I learneded something new today, much appreciated.

FOSS implies it's your hardware, therefore a subpoena would extract no information because there is no information outside of the users device.

3 weeks ago

Interesting, thank you. I guess I don't know enough about FOSS then.

3 weeks ago , edited 3 weeks ago

"Free and open source software." It's an ethos that says that code should be free and open for people to use and improve as they see fit. The core of it is that if you modify any software that is FOSS, your software must also be FOSS. So overtime the software and what its used for improve, change, widen. Lucky for us, the movement has been ongoing for 50+ years, so it's a mature ethos whose benefits are everywhere. Most of the internet runs on FOSS. Lemmy itself is FOSS.

It doesn't necessarily mean an app is more private, but it does mean you can generally self host, as the commentor said. There isn't a profit motive with most FOSS, at least not at its core, so there is little desire to data harvest generally. There is also a heavy overlap between FOSS advocates and privacy advocates, so they tend to be more privacy conscious via local data storage or encryption.

3 weeks ago , edited 3 weeks ago

Something being FOSS doesn't necessarily mean it's safe / ethical, but a LOT of FOSS apps are designed with those principles in mind.

However, being FOSS means that if an app claims that it is safe / ethical (ex. In this case, not storing data anywhere but on your device), you or an experienced peer can check the code to verify that fact.

3 weeks ago

It doesn't, but with these apps, you can see what information they send back to their servers (if any). If there is no info getting sent back to any servers, then there's nothing a subpoena can do since there's no info to subpoena. You can't obtain info that just isn't there.

3 weeks ago

That makes sense. Thank you!

3 weeks ago

Simple. Most FOSS are built for privacy and thus do not harvest data to send to some server somewhere in the world for whatever obscure reason. The data is locally stored on your device and stays and dies there.

No callback, no selling nor surrending data.

Personally speaking, I'd quicker have all data banks destroyed than surrendered to whatever purposes, if I ever decided to build an aplication that somehow compiled data.

Deleted by author

reply
0

source on the 28 notch stick?

It was some time ago that I read of that, so the details are fuzzy. And here's what I found:

https://nypost.com/2019/07/25/10000-year-old-engraved-stone-could-be-worlds-oldest-lunar-calendar/

“A 10,000-year-old engraved stone could be a lunar calendar. The rare pebble — found high up in the mountains near Rome, Italy, the hammer-stone was found on top of Monte Alta in the Alban Hills. It’s believed that our early ancestors would’ve used the stone to keep track of the moon’s cycles. Notches were engraved “as if they were being used to count, calculate or store the record of some kind of information. And these notches — which total either 27 or 28 — suggest the stone’s engraver used the pebble to track lunar cycles.” ref

It could also have been The Ishango Bone (https://www.thedailybeast.com/the-ishango-bone-the-worlds-oldest-period-tracker/)

3 weeks ago

Yeah they may not cooperate with authorities, but I'm sure they'd be happy to sell it to contractors working on behalf of the government to the same ends. They already sell the info as it is.

That will last only until a judge signs a warrant.

3 weeks ago

Or until the American people get bored with talking about it, like with everything else, then stop caring and just let whatever happen.

Or until Trump decides to have an army of hackers like Putin.

We already do. We wage cyber warfare with other countries the same.

Were people unclear on this? They think that the US is just letting cyber warfare happen without participating...?

3 weeks ago

Cool but the proper solution is that they shouldn't have access to this data at all. It should be either stored locally, or encrypted on their servers. Companies not being able to access their consumer data should be the default.

I wouldn't trust it. We now live in an era where, if you want control of any kind of information, you simply can't share it digitally in any way.

Period tracking apps should store no data at all in the cloud.

3 weeks ago

Some people want convenience of accessing the data between devices.

It's okay to store stuff in the cloud just make it's encrypted deeply and thoroughly and that the user is the only person with the key.

There's absolutely no reason for them to have access to this data.

Yup. I use Tuta for email, and they have a calendar feature that should be more than sufficient. Just set a recurring event for 28 days or whatever your personal cycle is, and you're good to go! Everything is E2EE, so there's nothing for the authorities to get.

I'm sure Proton Mail's calendar feature is equally sufficient here, or you could self-host something like NextCloud and use the calendar that way.

It's not about having a rigid schedule, but about actually tracking periods and analyzing the data. I'm male and that's about all I know about it

Eh, a calendar and a spreadsheet should be enough, but I also don't have menstrual cycles, so what do I know...

3 weeks ago

I'd imagine it's the same as personal finance apps. A spreadsheet can be enough, and it is enough for a lot of people, but a custom app can make things easier:

  • reducing the friction of keeping track
  • built in visualizations
  • alerts
  • integrating the data with other tools

etc.

3 weeks ago

I tend to get headaches more frequently at a certain point in my ~monthly cycle, not at the same time I have my period. It's nice to know it's coming so I can plan accordingly. Like avoid being on a road trip at that time, or proactively knocking it out with meds before it even starts.

Some people find their cycles affect their energy and recovery a lot, so they adjust their workout plans accordingly. Like knowing when within a cycle estrogen and testosterone are at their peak, versus progesterone.

Aside from just day count between periods, some people track temp, consistency of vaginal fluid, mood, weight, and probably other things depending on their needs.

3 weeks ago , edited 3 weeks ago

You actually have your period the same time everytime like in a textbook? That's sounds pretty nice, first time I heard someone has that. Usually it's pretty random, like sometimes it's 20 days sometimes it's 35 and you have to calculate it with the daily temperature. I'm kinda jealous ngl

I'm a male, but I am married to someone who has periods. And yeah, they're not textbook, but they're generally within a couple days. We can both tell when it's about to happen because my SO's hormones start going crazy (alternate between angry over small things and affectionate), and like clockwork, the menstrual cycle happens about 2 days later.

But yeah, it's generally about every 4 weeks, give or take a few days. It used to be all over the place, but now that she's been better about exercise and diet, it's a lot more consistent.

3 weeks ago

Oh that sounds really nice, in that case you really don't need to use a period app. I have to enter my temperature, cervix condition and (I don't know the English word for it but you know,) the 'slime' condition. Sometimes it's 6 weeks, sometimes it's 3, the app helps a lot but sometimes it's still off.

But how will they make their money mate?

3 weeks ago

no cloud or get fossed, son.

Seriously how some business makes money doesn’t matter in the context of state surveillance

Is there an open source period tracker that you have contributed to?

There are calendar apps, which should get the job done, assuming your menstrual cycle is pretty regular.

Why would you assume the cycle is regular? It’s a biological process that can vary quite a bit, which is part of why you would want to track it in the first place. There’s also much more to track that just the expected start date of your next cycle. The various tracking apps are quite a bit more involved than just a calendar.

This kind of surveillance should be something every platform fights against. Remember that the government does not own you and they are only entitled to any of your data at all when necessary to uphold the law and under a warrant. Protect your right to privacy or they will use what you do I private to justify stripping you of all your other rights in the name of justice they will at that point no longer uphold.

Every corporation registered under the US law is subject to the US law.

If you relying on a corpo to protect your data.... 🤡

3 weeks ago

Biowink GmbH is probably not a corporation registered under US law. If I had to guess, the government of Germany will not be particularly eager to force them to turn over data to the USA. The Germans take their *Datenschutz* very seriously.

Great point. Then they can take the hard stance but I doubt they will not to piss off largest consumer market in the world.

3 weeks ago

They've already taken the hard stance. If they roll it back, they will lose the trust of their users.

3 weeks ago , edited 3 weeks ago

No I'm relying on people to protect their own data, I'm saying that platforms should too.
Edit: also most of the time they don't have to turn over anything but do so willingly, they should say no unless presented with a valid warrant.

Corpos are unreliable but yes they should at least pretend not to turn it over.

Unless corpo is using zero knowledge set up, don't use it is the really the only way to use a corpo service imho

Yeah I think PIA is a golden example here. They've got RAM-only servers so they have no data to turn over in the first place.

Pia the third vendor along with proton and mullvad that are considered gold standard?

Does it have it port-forwarding?

Don't fall for it. Read their privacy policy.

They keep your data in the cloud and share it with third parties, including advertisers.

Pen and paper doesn't snitch.

3 weeks ago

not defending the bogus use of the cloud to host sensitive data, nor do i unquestioningly believe this? but correcting the record since you did 80% of the work in finding the link:

Be assured that the sensitive health data you track in the Clue app is never shared with or sold to advertisers, or any partners whose services we may recommend in Clue.

If you actually read what you sent it seems like the only data that is shared to advertisers is standard marketing stuff like IP, device ID, age group, and location. Still bad and I stand with others recommending locally hosted FOSS alternatives.

There are also foss alternatives. Install fdroid and get drip.

Drip is a horrible name for a period tracking app lol

I mean at that point just call it Bleed lol

That was my first thought. Why?

You guys are talking about it arent ya?

And look how fast you memorized the name.

I had to check my phone for the name.

3 weeks ago , edited 3 weeks ago

What an insightful comment, the_crotch

It actually inspired me to start writing my own competing period tracking app, Margaret Plug That Up Already You're Ruining The Carpet

I like you

3 weeks ago

menstrual surveillance

Now that's a phrase I would've never thought I would read.

Why? It’s a logical outcome of the combination of mass surveillance and draconian anti abortion laws. This is the sort of shit the judicial construction of the implied right to privacy was kinda built around stopping. This is just straight up the sort of shit Snowden warned us of.

So yeah, the federal government (and likely state as well), who have the data from your personal devices to understand far more of your sex life than you want your friends knowing, much less your Senator, are able to purchase or subpoena data from menstrual tracking apps and will do as the law tells them to. The law, meanwhile is written by a group of people who are vastly disproportionately elderly men with little to know understanding of any branch of science or medicine. A group notable for comments like the assumption that ecoptic pregnancies can be replanted and that presenting a snowball disproves global warming. The one gynecologist of note to have been in Congress in recent memory being Ron fucking Paul, who incidentally was anti choice.

To sum my previous paragraph to a thesis statement: people who have no idea how bodies work and couldn’t tell a Skene’s gland from a vas deferens and disproportionately think pee comes out the vagina get to decide the rules by which people who know every aspect of your life that they choose to look for decide if your menstrual irregularities are normal or an illegal abortion.

Why the hell period data needs to be stored on the cloud?

How much could it weight? A few Kb?
Local storage!

I would never trust such data leaving my device when is no need for it whatsoever.

Aren't there any open source period tracking apps? I'll do one, it can't be that hard. An sqlite database patched to a frontend calendar and some basic predictions based on normal scenarios.

3 weeks ago , edited 3 weeks ago

Aren’t there any open source period tracking apps?

Many. On F-Droid.

drip. menstrual cycle and fertility tracking (Open-source, non-commercial and leaves your data on your phone.)
https://f-droid.org/packages/com.drip/

Drip is a pretty wild name to call your menstrual tracking app.

3 weeks ago

Everyone says that. Idk what the big deal is

3 weeks ago , edited 3 weeks ago

Can’t those app offer this feature : replace all the original data by pseudo random data shifting the menstruation cycle in a way that would benefit the user at that moment ?
Or : shift all data to x days (easier to undo)

It’s crazy that we live in a world where we have to think about such things…

Why do they need to save the tracked period data to a server farm? Why can't it just be saved on the phone, huh?

Probably because they want to be able to maintain users during device switches. Given much of the world is on an annual or bi-annual cycle it'd suck to lose your users each time.

They could just do the password manager approach where the data is encrypted on your phone but stored in the cloud. App retains users, sensitive data remains private.

3 weeks ago

I wonder how many average users would be bothered to export their period database and transfer to a new phone every time they get a new phone. I do that when I get a new phone (not often, I use my phones till they break/are literally unusable and unfixable), but I've had real trouble getting other people to do these kinds of things.

3 weeks ago , edited 3 weeks ago

If you want an app that stores nothing on the cloud, check it out here on Android and here on IOS. My SO loves it!

Drip is also available on F-droid.

Haha that is some app name!

It's the app the comment above me was recommending. I just wanted to make that clear and show that it was available outside the app stores as well.

Still not worth the risk to download it. Get a paper journal, they make ones that guide you through tracking all the necessary data.

Paper without some sort of code to hide what's happening isn't much better, considering if something ever happens you could get searched.

Sure I guess but you can also just leave it at home.

3 weeks ago , edited 3 weeks ago

Good news but kind of bad that they say this publicly.

The pro of showing support for reproductive rights, building trust and protecting user privacy is great for publicity but I am afraid the downsides will eventually lead to legal consquences, making the whole thing seen even more political than it already is and that it might have a huge impact on their business.

The last thing might sound stupid, but it's a business. And if you have crazy woman who will not use this because they support the ban on abortions the sells will go down in for example republican states making the company MORE VULNERABLE to changing how they think about sharing data to authorities or not.

And yes america has woman who totally want the government to be in control of their bodies LOL.
And yes america has many people who can't even figure out the name of bordering states. States, not countries.
Ask 10 americans and only 5 will know that Canada is directly above (North) of america and Mexico South.

You have Burger King removing the 1/3 pounder Burger because people thought it's less than a 1/4 pounder Burger cause 4 is higher than 3 making Burger King have less sells on the 1/3 Pounder than the 1/4 LOL.

Sometimes not talking about specific topics is "more" than even speaking about it. Just don't share data and say nothing, they won't ask. Most maga's trumpers won't ask if you don't give them a foundation to poop on.

The hilarious thing though is that most abortions are done in California, but only because of abortion tourism (example from Texas). A typicall trumper will now claim this is wrong and say democrats love abortions... This is so sad.

I am neither republican nor democrat, I am german and don't live in that country but we have trumpers too so don't worry and hang in there.

3 weeks ago

You have Burger King removing the 1/3 pounder Burger because people thought it's less than a 1/4 pounder Burger cause 4 is higher than 3 making Burger King have less sells on the 1/3 Pounder than the 1/4 LOL.

That was A&W.

3 weeks ago

BRB, going to sell 1/8 lb burgers to take advantage of dumb Americans

Not even joking, it would probably work. Assuming you had some sort of brand recognition already.

About time they went metric

/s

3 weeks ago

My bad :-)

This isn't a company that has a great track record. They are saying this now when Trump is powerless as a form of advertisement. When up against a legal wall and at risk of losing advertisers or going out of business, they too will cave. In this era you get to say whatever you want right now and you don't even need to apologize when you renig on it tomorrow.

3 weeks ago

Newsweek has really trash headlines. No one’s asking, yet, so that’s a terrible headline.

(Yes I voted Kamala, and yes I did it for medical autonomy reasons as well as orange potato reasons, Vance reasons, heritage foundation reasons, and Project 2025.)

It’s still a trash headline and pretty standard fare for Newsweek. Why is it trash? Because it’s classic The Boy Who Cried Wolf. When I read this headline, I need it to be real.

Hey government perverts. Keep out of panties that are not on your own ass or your partner's. And ask before you dive in. You're disgusting!

3 weeks ago

First I thought "WTF is period data a thing that should concern the government", but then I noticed we are talking about the future Handmaids Tale country here.

3 weeks ago

My wife uses a spreadsheet and connected it to her calendar. Seems pretty accurate.

It is a modified version of this:

http://www.alizaaufrichtig.com/period-tracker

Hmm, would there be a place for a e2e encrypted menstrual tracking app? I made such an app for tracking baby activities, menstrual calendar sounds much easier.

3 weeks ago

I don’t know if they’re already doing this, but they need to find ways to make security so robust that it is architecturally impossible for the business to handover useful data.

And here’s hoping courts continue to allow people to plead the 5th and not fork over passwords. If that protection falls, I don’t know how you’d design a digital workaround that would keep people out of contempt of court charges.

3 weeks ago

They could do it by not uploading any of the data, or if they do, uploading it encrypted with the only key being on the user's device or a passcode.

Both are well established ways to secure data, but the company itself would not be able to interact with the data at all past storing it, so any features/revenue there would end.

3 weeks ago , edited 3 weeks ago

You can already be compelled to give up biometric data like fingerprint to unlock your phone, I believe. I give it less than a year before SCOTUS extends that to PINs. And yes, I am sure they will find ways to get it out of people. Or if not, at least they tortured you, and that's what they really wanted.

Assuming we have anything resembling rule of law at that point.

3 weeks ago , edited 3 weeks ago

Shit which reminds me. Now I have to stop using the app… and delete it.

Not a choice they can make, if they have the data then the government can compel them to turn it over

For now

I don't know much about menstrual cycles. Wouldn't it be easier and just as effective to track with pen and paper?

The main service my period tracker provides is a notification telling me "hey, it's PMS time. If you're emo it's ok, it's probably just hormones and not the real end of the world. You're also likely to hyperfixate on something. Pull out your knitting a fixate on that, instead of risking fixating on something someone said off-handedly a decade ago that now makes you cry".

(The message is user-configurable. Mine doesn't say that verbatum, but that's the gist.)

nah. Think about how good computers are at pattern recognition and long term storage for analysis. Far superior to a pen and paper

I laid awake last night thinking if it would be possible to make an elaborate Excel spreadsheet to accomplish this. I need to research more about the specifics of menstrual cycles, but I think it wouldn't take that much effort. It could be disguised as something else and shared freely, and people could store it locally to ensure privacy.

Do you think Excel=pen and paper?

You guys are talking about the same thing. Excel is a pretty powerful data storage and manipulation app. It excels (heh) at pattern recognition.

No, I don't think they're the same. I was taking the knowledge the poster above provided and brainstorming options.

Deleted by author

reply
-1

Because 99% of ladies, and gentlemen, don't use password managers.

3 weeks ago

They just remember that shit?

It's easy when you use the same password for encoding everything.

They remember the one password that they use for everything.