The policy discloses that Google collects health information including medical history, vital signs, and health metrics through services such as Fitbit, Pixel devices, and the Google Health Studies app, and states that processing of health data subject to the Washington My Health My Data Act and Nevada SB 370 occurs with user consent, which may be withdrawn.
This analysis describes what Google's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision identifies health data as a collected category across multiple Google hardware and software products and establishes consent as the stated legal basis for processing under the Washington My Health My Data Act and Nevada SB 370, creating withdrawal rights that are operationally distinct from general account-level privacy controls.
⚠ Health data collected through Fitbit, Pixel devices, and Google Health Studies will be processed as described in the policy unless users withdraw consent where permitted under applicable state law.
Cross-platform context
See how other platforms handle Health Data Processing and Consent and similar clauses.
Compare across platforms →"Health information if you choose to provide it, such as your medical history, vital signs and health metrics (like blood glucose levels), and other similar information related to your physical or mental health, in the course of using Google services that offer health-related features, such as the Google Health Studies app, Fitbit, or Pixel devices. The Washington My Health My Data Act and Nevada Senate Bill 370 provide specific rights in addition to those rights above, that apply to health information. When you provide health information subject to these laws, Google processes it with your consent, which you may withdraw, or as otherwise permitted by these laws.Excerpt from Google's Privacy Policy
REGULATORY LANDSCAPE: This provision implicates the Washington My Health My Data Act and Nevada Senate Bill 370, which impose specific consent, disclosure, and deletion obligations on entities processing consumer health data.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision identifies health data as a collected category across multiple Google hardware and software products and establishes consent as the stated legal basis for processing under the Washington My Health My Data Act and Nevada SB 370, creating withdrawal rights that are operationally distinct from general account-level privacy controls.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Google.