Period tracking appFlois hoping its freshly release “ Anonymous Mode ” will give users the confidence to persist in using their product even as state law of nature enforcement authorities around the country seem increasingly interested in beg data from apps to pursue alleged abortion seeker . Privacy expert speaking with Gizmodo welcome Flo ’s update but warned it still falls forgetful of meeting the definition of fully anonymous . Similarly , the experts said privacy - preserving features like these are underlying and should n’t come as add - on pick , particularly given the potentially horrific upshot of that data getting in the incorrect hand .
Flo , one of the lead apps in its field supposedly shoot a line around 240 million substance abuser , announcedthe privacy - keep up fashion in June , around one week after the Supreme CourtoverturnedRoe V. Wade . The mode was officiallyreleasedfor iOS users on Wednesday with an Android version get next calendar month . Flo take this new mode bring home the bacon its users the power to expend its religious service without providing a name , e-mail address , or identifiers from being associate with the health information . These features , according to Flo ’s press release , mark a first for female health apps .
The company tell it turned to web infrastructure company Cloudflare to serve make all that chance . By using Cloudflare ’s App Relay , Flo say it can ensure user ’ privateness on “ various levels”—from logged symptom on a gadget to data transferred over the connection — and ensure no single party sue a user ’s data has a complete sight of who the users are and what they ’re endeavor to access . In possibility , Flo sound out this feeler should importantly reduce users ’ digital footprints when communicating with Flo .

Photo: Jimmy Tudeschi (Shutterstock)
“ Now , more than ever , cleaning lady merit to memory access , cart track , and take in sixth sense into their personal health entropy without fearing government pursuance , ” Cath Everett , Flo ’s VP of Product and Content say in a financial statement . “ We hope this milestone will coiffure an example for the industry and inspire companies to raise the bar when it comes to privateness and security principle . ”
Flo ’s anonymous fashion will reportedly come at the expense of certain features , allot toThe Verge . Anonymous Mode users , for instance , wo n’t be capable to connect to a wearable equipment and also ca n’t transfer their information to a new twist .
Experts say Anonymous Mode is good, but not technically “anonymous”
speak with Gizmodo , Surveillance Technology Oversight Project Executive Director Albert Fox Cahn spat Flo ’s exploit , which he described as a “ huge step forward , ” but cautioned against overstating its capabilities . Though an betterment , Fox Cahn worry that referring to the musical mode as “ full anon. , ” miss the mark .
“ Flo has done a lot to confine the data point it can access on the backend , but there are still some risks about how police could track this data if they ever arrogate a user ’s gimmick , ” Fox Cahn tell . “ These sorts of privateness practices should be much more unglamourous , but the sad verity is whenever we track our life digitally , there is some risk it can be used against us in courtroom . ”
Similarly , battle for the Future Campaign Director Caitlin Seeley George told Gizmodo the young modality shows companies are paying more attention to post - Roe privacy concerns but press out doubts over whether that ’s enough to regain questioning user ’ trust . A Federal Trade Commissioncomplaintlast yr alleged Flo shared the health info of users with third parties despite say they would keep that information private . Some users alsoreportedlydeleted their fertility tracking apps over privateness concerns following the Roe reversals .

Photo: Anna Moneymaker (Getty Images)
Seeley George went on to say features like Flo ’s so - called Anonymous Mode should be on by default for companies deal with potentially sensitive user datum . Those firms , fit in to Seeley George , should also encrypt messages terminate - to - end , quit gather and hold back localization and search information , and refrain from selling data to companies that may abuse it .
“ Ultimately , seclusion should not be an added feature that companies only take up after getting catch clapperclaw their drug user ’ information , ” Seeley George said .
Flo respond to those criticisms in a statement put up to Gizmodo after publication . In it , Flo said it ’s of import to draw a distinction between privateness and anonymity .

“ seclusion is a user ’s ability to control who can see their action and personal data , ” Flo wrote . “ Anonymity is the power to decouple sound out data from their indistinguishability or chronicle , so that a third party can not distinguish actions or data from services as belong to to an person . ”
Anonymous Mode , according to Flo , lets drug user access many feature without sharing personal information assort with their account and decouple identifier like electronic mail addresses , requital identifiers , IP name and address , IDs for adman , Google or Apple report IDs , and other IDs from drug user health datum .
“ To decrease the chances for wellness data being compromise from direct access to the gadget , Flo encourages users to total an access code for their Flo Anonymous Mode account during onboarding , ” Flo said . “ The access code is an extra layer of privacy in face the twist is compromised . It significantly mitigates the most common peril of unauthorised access to the machine ( lose , stolen , accessed ) . ”

proponent , research worker , and lawmakers have for monthswarnedof a possible datum concealment crisis sparked by the Supreme Court ’s overturning of Roe V. Wade . With gobs of states illegalize and even criminalize abortion , many fear local legal philosophy enforcement could just request substance abuser information from apps like Flo to potentially corroborate reprehensible pursuance .
There ’s already some grounds of this occur . in the beginning this year , Nebraska authoritiesprosecuteda 17 - year - previous girl and her female parent for an apparent at - abode miscarriage . Prosecutors proved their case , in part , by obtaining Facebook messages between the girl and her mother which allegedly confirm they buy medication to induce an miscarriage . Though this pillow slip take place before Roe V. Wade was overturned , advocates warn it ’s a prime example of the potential real - earth consequences of non - anonymized health data .
While it ’s gentle to single out Flo for adding a of the essence privateness - preserving as an add - on feature of speech , the inauspicious world is that flow trackers and pregnancy apps , in general , areoften seclusion incubus . Mozillareviewed25 of these apps not long after the Supreme Court ruling and labeled 18 of them with a “ privateness not included ” pestle . Not a single one of the pregnancy apps go over receive privacy researchers ’ standards . Most of the apps , according to the research , did n’t have open guidelines for how they would respond to data requests from jurisprudence enforcement .

These are n’t the only types of business firm capable of commute data on potentially pregnant people either . A Gizmodoinvestigationearlier this yr key out 32 unlike data brokers across the U.S. selling access to singular mobile IDs of nearly 3 billion profiles describe as “ actively pregnant ” or “ shit for maternal quality intersection . ”
“ We require companies to garner and keep on less data from the get - go , and to make ‘ Anonymous Mode ’ the default so that no one has to be afraid of who might clear access to their data , ” Seeley George say . “ This should be the standard not only for apps collecting health and generative - bear on data but for all apps . ”
Update : September 15 , 11:50 AM : Added program line from Flo .

Daily Newsletter
Get the best technical school , science , and culture newsworthiness in your inbox day by day .
News from the future , delivered to your present .
You May Also Like
![]()










![]()