Strava · Strava Privacy Policy

Data Retention and Account Deletion

Medium severity
Share 𝕏 Share in Share

Why it matters

Account deletion does not guarantee complete erasure of all data derived from your activities — aggregated and deidentified data (including contributions to the Global Heatmap) may persist even after your account is gone.

Consumer impact

Strava collects detailed GPS location, health metrics (heart rate, HRV, VO2max), and activity data that can reveal sensitive personal information such as home address, daily routines, and health conditions. This data is used for AI model training, shared in community features like the Global Heatmap, and may be accessible to other users depending on your privacy settings. You can reduce exposure by navigating to Settings > Privacy Controls in the Strava app to set default activity visibility to 'Only Me,' disable Flyby, and request exclusion from the Global Heatmap.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Log into Strava, navigate to Settings > My Account > Delete Account, and follow the account deletion steps; after deletion, submit a separate data deletion request via Strava's privacy request form at https://www.strava.com/athlete/privacy to confirm all personal data has been removed.

Applicable agencies

  • FTC
    The FTC has enforcement authority over failures to honor data deletion commitments under FTC Act Section 5, including cases where data claimed to be deleted is retained by service providers.
    File a complaint →
  • State AG
    California, Washington, and other state AGs have enforcement authority over violations of statutory data deletion rights under CCPA §1798.105 and WMHMDA.
    File a complaint →

Provision details

Document information
Document
Strava Privacy Policy
Entity
Strava
Document last updated
March 24, 2026
Tracking information
First tracked
April 1, 2026
Last verified
April 1, 2026
Record ID
CA-P-001437
Document ID
CA-D-00272
Evidence Provenance
Source URL
Wayback Machine
SHA-256
e06a34dfa42e1d94055f19b53ac2aaa4928a0edaacc3e46388b431c9a71ed342
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Strava | Document: Strava Privacy Policy | Record: CA-P-001437
Captured: 2026-04-01 14:09:14 UTC | SHA-256: e06a34dfa42e1d94…
URL: https://conductatlas.com/platform/strava/strava-privacy-policy/data-retention-and-account-deletion/
Accessed: April 4, 2026
Classification
Severity
Medium
Categories

Other provisions in this document