The policy discloses that Samsung Health and connected devices collect detailed health and fitness metrics including heart rate, sleep patterns, menstrual cycle data, stress levels, and blood oxygen levels.
This analysis describes what Samsung's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision identifies collection of health metrics that, while not covered by HIPAA in a consumer app context, are classified as sensitive personal information under CCPA/CPRA and subject to FTC guidance on health data. Menstrual cycle and reproductive health data have received specific regulatory and legislative attention since 2022.
The updated policy expands Samsung's data collection authority to include device registration, verification for repairs, and configuration of device settings. The terms now explicitly state that Samsung may collect card and transaction information if you apply for a Samsung-branded payment card. Samsung clarified that it will only send personalized marketing when you have provided consent, where required by law. The policy removed its previous statement that defective devices are wiped of personal information before analysis; the updated terms now state Samsung will analyze returned defective devices without that explicit pre-analysis data deletion commitment. For US residents, the policy now discloses rights to opt out of sale of personal information, sharing for cross-context behavioral advertising, targeted advertising processing, sensitive data collection or processing, and to request lists of third parties receiving your information.
View change record →Removal of the health and fitness data collection provision eliminates explicit disclosure of sensitive health information collection through Samsung Health, representing significant reduction in transparency about intimate personal data.
View full change record →This provision establishes that Samsung Health and connected devices collect detailed health and biometric metrics. Under CCPA/CPRA, California residents have the right to limit the use of sensitive personal information, including health data, and to request deletion of this information.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
To stop us collecting your location information, you can update your device settings, stop using the Service, or uninstall our mobile apps.
"Health and Fitness Information: Information about your health, fitness, and wellness, such as height, weight, heart rate, sleep patterns, menstrual cycle, stress levels, blood oxygen levels, and other health metrics that you provide or that are collected through Samsung devices and services such as Samsung Health.Excerpt from Samsung's Privacy Policy
REGULATORY LANDSCAPE: Health and fitness data collected by consumer apps is generally not covered by HIPAA, but the FTC Act and FTC's 2024 Health Breach Notification Rule apply to health apps and connected devices.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision identifies collection of health metrics that, while not covered by HIPAA in a consumer app context, are classified as sensitive personal information under CCPA/CPRA and subject to FTC guidance on health data. Menstrual cycle and reproductive health data have received specific regulatory and legislative attention since 2022.
This provision establishes that Samsung Health and connected devices collect detailed health and biometric metrics. Under CCPA/CPRA, California residents have the right to limit the use of sensitive personal information, including health data, and to request deletion of this information.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Samsung.