With user permission, the policy authorizes collection of health data from connected devices including continuous glucose monitors, heart rate monitors, activity trackers, scales, and wearables, as well as from platform health repositories such as Apple HealthKit and Google Health Connect.
This analysis describes what MyFitnessPal's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that highly sensitive physiological data, including continuous glucose monitoring readings, heart rate, and body composition metrics, may be ingested from connected devices and platform health repositories into MyFitnessPal's data environment, subject to the broader data use and disclosure practices described in this policy.
The agreement authorizes ingestion of continuous glucose monitor data, heart rate data, and other wearable-sourced physiological data into MyFitnessPal's systems with user permission; the policy separately states that data received from HealthKit and Google Health Connect will not be used for marketing and advertising or transferred to third parties for marketing and advertising purposes.
Cross-platform context
See how other platforms handle Connected Health Device Data Collection and similar clauses.
Compare across platforms →"Certain connected devices, such as heart rate monitors, Continuous Glucose Monitoring devices, activity trackers, exercise equipment, scales, and/or wearables, that integrate with the Services, may allow us to collect Food and Activity Diary Data with your permission. With your permission, we may also collect relevant data from your device's health and fitness repository, such as Apple's HealthKit or Android's Google Health Connect.Excerpt from MyFitnessPal's Privacy Policy
1) REGULATORY LANDSCAPE: Collection of continuous glucose monitoring and other physiological device data engages Washington's My Health MY Data Act, CCPA sensitive personal information provisions, and potentially GDPR Article 9 for EEA users.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes that highly sensitive physiological data, including continuous glucose monitoring readings, heart rate, and body composition metrics, may be ingested from connected devices and platform health repositories into MyFitnessPal's data environment, subject to the broader data use and disclosure practices described in this policy.
The agreement authorizes ingestion of continuous glucose monitor data, heart rate data, and other wearable-sourced physiological data into MyFitnessPal's systems with user permission; the policy separately states that data received from HealthKit and Google Health Connect will not be used for marketing and advertising or transferred to third parties for marketing and advertising purposes.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by MyFitnessPal.