8 Total
2 High severity
6 Medium severity
0 Low severity
Summary

Noom's privacy policy explains what personal information the app collects about you — including your weight, diet, health habits, and even mental health data — and how it uses and shares that information with advertisers and other companies. Noom may use your health data to personalize services and for marketing purposes, and shares data with third-party partners. You can request deletion of your data or opt out of certain data sharing by contacting Noom directly.

Technical Summary

Noom's Privacy Policy governs the collection, use, storage, and sharing of personal data across its websites, mobile applications, devices, and related health and wellness services. The policy discloses collection of sensitive health-related data including weight, food logs, exercise activity, biometric data, and mental health information, as well as device identifiers, location data, and behavioral analytics. Data is shared with third-party service providers, advertising partners, and analytics vendors, with limited sharing controls available to users. The policy provides opt-out mechanisms for certain data uses, including marketing communications and some third-party sharing, and includes state-specific rights for California, Virginia, Colorado, and other US residents under applicable consumer privacy laws. No explicit HIPAA compliance framework is asserted, which is notable given the sensitivity of health data collected.

Institutional Analysis

This policy engages primarily with the CCPA/CPRA (California), Virginia CDPA, Colorado CPA, and analogous state privacy frameworks, as well as GDPR and UK GDPR for international users. Compliance tea…

This policy engages primarily with the CCPA/CPRA (California), Virginia CDPA, Colorado CPA, and analogous state privacy frameworks, as well as GDPR and UK GDPR for international users. Compliance teams should note the absence of an explicit HIPAA compliance assertion despite collection of health an…

🔒

Compliance intelligence locked

Regulatory exposure, material risk, and due diligence action items.

Evidence Provenance
Captured April 3, 2026 05:37 UTC
Document ID CA-D-000397
Version ID CA-V-000442
Wayback Machine View archived versions →
SHA-256 856e9488bfa3d40641f1ae190834271fb92cfb6adfcc66dbe3da6f187d36180b
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Cryptographically signed
Change Timeline
Analyzed Changes

1 change analyzed since monitoring began.

What changed Noom updated their Noom Privacy Policy on April 03, 2026. Change detected: 24 sentence(s) added, 12 sentence(s) modified. Document contained 176 sentences after update.
Consumer impact Noom added concise plain-language summaries to the data collection, data use, and data sharing sections of their privacy policy, making it easier for users to quickly understand how their information is handled. These summaries do not change the underlying data practices but improve transparency and readability for all users. You can review the updated policy on Noom's website to see a clearer breakdown of what data is collected and how it is used.
Why it matters Noom now provides plain-language summaries at the top of key policy sections, making it easier for users to understand how their health and personal data is collected, used, and shared without reading dense legal text. This improves transparency but does not change any underlying data practices.
High Severity — 2 provisions
Medium Severity — 6 provisions