Noom collects very personal health details including your weight, what you eat, how much you exercise, your sleep patterns, and any health conditions or medications you voluntarily enter into the app.
Your weight, food logs, health conditions, and medications entered into Noom are collected and may be used for advertising and analytics, exposing highly sensitive personal health information to third parties beyond the core wellness service.
Cross-platform context
See how other platforms handle Sensitive Health Data Collection and similar clauses.
Compare across platforms →Health data is among the most sensitive personal information you can share — it can affect insurance eligibility, employment, and personal privacy — and Noom retains and processes this data for purposes that include advertising.
1. REGULATORY FRAMEWORK: Health data collected by Noom implicates GDPR Art. 9 (special categories of personal data requiring explicit consent), CCPA/CPRA §1798.121 (sensitive personal information including health data carries opt-out rights and heightened obligations), Washington My Health MY Data Act (broad definition of 'consumer health data' covers weight, diet, and conditions), and FTC Act Section 5 (deceptive practices if data use exceeds disclosed purposes). Noom is not a HIPAA-covered entity but state health privacy laws may independently apply. Primary enforcement: FTC, EU DPAs, CPPA, State AGs in WA, CT, CO. 2.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.