The policy states that Oura enables integrations with third-party services including Google Health Connect and Apple HealthKit on a consent basis, and processes data received from these integrations according to the third parties' applicable terms, including the Google Health Connect Permissions policy and Google Limited Use requirements.
This analysis describes what Oura's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that data exchanged through third-party integrations is governed in part by the third parties' own terms and policies, and that Oura's compliance with those terms is conditioned on awareness of policy updates. The qualification 'as we become aware of those policies and agreements' introduces a temporal condition on Oura's adherence to third-party data governance requirements.
Interpretive note: The operational scope of the 'as we become aware' qualification regarding third-party policy compliance is ambiguous and may create uncertainty about Oura's obligations during third-party policy update periods.
The updated policy explicitly discloses that Oura uses artificial intelligence and machine learning in the service, including an AI assistant called Oura Advisor that provides personalized wellness guidance based on information you submit or that Oura collects. The revised terms state that Oura may use AI and algorithmic analysis to suggest partner services and may use personal data to develop or refine AI-powered health features. The policy establishes that you retain choice about whether to engage with these AI features or share personal data with partner services when suggestions are offered.
View change record →Provision name changed from 'Third-Party Integration and Data Sharing' to 'Third-Party Integrations Data Processing' but the excerpt text remains identical.
View full change record →Under this clause, users who enable integrations with Google Health Connect, Apple HealthKit, or other partner services authorize data exchange governed by both Oura's policy and the applicable third-party terms. The scope and nature of data shared through each integration is subject to the terms of those third-party services in addition to Oura's policy.
How other platforms handle this
We will also provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected.
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
"We process personal data you provide to Oura to enable third party integrations, services, features, and offerings. For example, with your permission, our Services may integrate with third-party services like Google Health Connect and Apple HealthKit, or those of our partners. Oura takes measures to help ensure third-party services protect your personal data, which means that Oura only processes your data with respect to third-party integrations when you choose to integrate them with our Services, or when you provide the necessary consents. We process the data we receive from these third-parties according to applicable terms, such as the Google Health Connect Permissions policy and Google Limited Use requirements, as well as relevant third-party developer license agreements, as we become aware of those policies and agreements.Excerpt from Oura's Privacy Policy
1) REGULATORY LANDSCAPE: This provision implicates GDPR requirements for data transfers to third-party controllers or processors, CCPA/CPRA disclosure requirements for third-party data sharing, and the Google Health Connect Permissions policy and Google API Services User …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes that data exchanged through third-party integrations is governed in part by the third parties' own terms and policies, and that Oura's compliance with those terms is conditioned on awareness of policy updates. The qualification 'as we become aware of those policies and agreements' introduces a temporal condition on Oura's adherence to third-party data governance requirements.
Under this clause, users who enable integrations with Google Health Connect, Apple HealthKit, or other partner services authorize data exchange governed by both Oura's policy and the applicable third-party terms. The scope and nature of data shared through each integration is subject to the terms of those third-party services in addition to Oura's policy.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Oura.