Even though the Heatmap is described as aggregated, individual users' frequent routes can be inferred from it — potentially revealing home addresses, workplaces, and daily routines — as demonstrated by real-world security incidents in 2018.
Strava collects detailed GPS location, health metrics (heart rate, HRV, VO2max), and activity data that can reveal sensitive personal information such as home address, daily routines, and health conditions. This data is used for AI model training, shared in community features like the Global Heatmap, and may be accessible to other users depending on your privacy settings. You can reduce exposure by navigating to Settings > Privacy Controls in the Strava app to set default activity visibility to 'Only Me,' disable Flyby, and request exclusion from the Global Heatmap.