Fitbit and Google share user profile data (name, photo, friends list) with each other as joint data controllers to maintain friends list visibility across both platforms following the June 2023 account migration option.
This analysis describes what Fitbit's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a joint data controllership arrangement under GDPR Article 26 between Fitbit International Unlimited and Google Ireland Limited (EEA/Switzerland) or Google LLC (UK), requiring a documented allocation of data subject rights responsibilities between the two entities. Users who did not migrate their accounts to Google are nonetheless subject to profile data sharing with Google under this arrangement.
Under this provision, Fitbit shares user name, profile photo, and friends list with Google regardless of whether the user chose to migrate their account to Google, for the purpose of maintaining friends list visibility across both services. Users in the EEA, UK, or Switzerland may exercise data subject rights including the right to object to this processing by contacting Fitbit at data-protection-office@fitbit.com.
Cross-platform context
See how other platforms handle Fitbit-Google Joint Controllership for Profile Data and similar clauses.
Compare across platforms →"From June 6, 2023, Fitbit users will have the opportunity to move their accounts to Google. This means that some Fitbit users will be part of the Google service while others may remain part of the Fitbit service. As a result, to ensure our users can still view their friends lists (including where your friends move their service to Google), Fitbit and Google will share with each other limited profile information about their Fitbit users, notably the user's name, photo and friends list ("Joint Processing"). (1) Fitbit International Unlimited and Google Ireland Limited (for users in the EEA or Switzerland) and (2) Fitbit International Unlimited and Google LLC (for users in the UK) are joint controllers for this Joint Processing with Fitbit and Google remaining responsible for their respective obligations under data protection law.Excerpt from Fitbit's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes a joint data controllership arrangement under GDPR Article 26 between Fitbit International Unlimited and Google Ireland Limited (EEA/Switzerland) or Google LLC (UK), requiring a documented allocation of data subject rights responsibilities between the two entities. Users who did not migrate their accounts to Google are nonetheless subject to profile data sharing with Google under this arrangement.
Under this provision, Fitbit shares user name, profile photo, and friends list with Google regardless of whether the user chose to migrate their account to Google, for the purpose of maintaining friends list visibility across both services. Users in the EEA, UK, or Switzerland may exercise data subject rights including the right to object to this processing by contacting Fitbit …
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Fitbit.