Jury finds Meta violated California privacy laws by secretly collecting Flo users’ menstrual health data

Meta was found guilty of violating privacy by collecting menstrual data from Flo users, impacting millions and sparking legal debates.

: A jury in California found Meta in violation of privacy laws by collecting menstrual data from Flo users without their consent, and using it for ad tracking. The class-action lawsuit, representing millions of users, also involved Google and ad analytics companies, although Google and Flo settled earlier. Lead trial attorneys stressed the importance of protecting digital health data and holding companies accountable for privacy breaches. Meta disagreed with the verdict, stating that the company prioritizes user privacy and denies the claims, exploring legal options for appeal.

A jury in California has determined that Meta Platforms Inc., the parent company of Facebook, has violated the state's user privacy laws. This decision was the outcome of a class-action lawsuit initiated by users of the Flo Health app, a period-tracking application. Users accused Meta of clandestinely collecting intimate menstrual health data without their consent and misusing it for ad-tracking purposes. This case underscores the critical concerns surrounding the handling of sensitive health data by major technology companies.

In the lawsuit filed in 2021, the plaintiffs represented millions of users who believed their private health information, including period dates and fertility goals, was accessed without permission. The lawsuit not only named Flo and Meta but also included Google and ad analytics companies like AppFlyers and Flurry. Google settled the claims against it in July, and Flo reached a settlement earlier this month. This development highlights the fundamental issue of digital privacy in the era of personalized app services.

“This verdict sends a clear message about the protection of digital health data and the responsibilities of Big Tech,” remarked the lead trial attorneys, Michael P. Canty and Carol C. Villegas. The attorneys emphasized the importance of holding companies like Meta accountable when they surreptitiously profit from users’ personal information. They pointed out that the case reinforces a fundamental right to privacy, particularly regarding sensitive health data.

Meta, however, vocally disagreed with the jury's decision. A spokesman for the company stated, “We vigorously disagree with this outcome and are exploring all legal options. The plaintiffs’ claims against Meta are simply false. User privacy is important to Meta, which is why we do not want health or other sensitive information, and why our terms prohibit developers from sending any.” This dispute illustrates the ongoing legal and ethical tensions between tech companies and user privacy rights.

Flo Health's own involvement came under scrutiny, especially after raising $200 million in Series C funding from General Atlantic, valuing the app at over $1 billion. The case remains a poignant example of the increasing regulatory oversight and legal challenges tech companies face in today's digital landscape, particularly concerning user data and privacy.

Sources: TechCrunch, Bloomberg Law, The Record