Part 5 of 6 in Understanding Your Cycle
Your Cycle Data Is Medical Data: Privacy 101
What menstrual cycle data reveals, why it deserves device-only protection, and five questions to ask before trusting any period tracking app with your information. Lesson 5 of 6.
This article is educational information, not medical advice. It isn't a substitute for the judgement of a qualified professional — please talk to a doctor or other clinician about your specific situation.
Of all the information a phone holds about you, cycle data occupies a uniquely sensitive category. It is not just behavioural — it is physiological and deeply inferential. From cycle data, it is possible to draw conclusions about pregnancy, potential fertility challenges, reproductive intentions, and health conditions associated with irregular cycles. Depending on where you live and how data is handled, this information can have legal, insurance, or employment implications that go well beyond targeted advertising. This lesson explains what cycle data reveals, how period tracking apps typically handle it, and the questions worth asking before you decide where your data lives.
What cycle data can reveal
A regular log of period dates, cycle lengths, and symptoms is more informationally rich than it appears. A sequence of irregular cycles can suggest potential hormonal conditions. A sudden cessation of periods can indicate pregnancy or a reproductive health change. Mood and symptom patterns tied to the luteal phase can suggest conditions including PMDD. Fertile window logs reveal reproductive intentions. The combination of cycle tracking with other health data — weight, sleep, mood — creates a profile that can be used to infer things far beyond what the user intended to share.
This is not a hypothetical risk. Health data companies, advertising platforms, and data brokers have active markets for this category of information. The sensitivity of cycle data was significantly highlighted by legal discussions in multiple jurisdictions following reproductive rights legislative changes — raising the question of whether law enforcement could seek this data from app companies through legal processes.
How apps typically handle your data
Period tracking apps vary enormously in their data practices. Some store all data on the device and never transmit it. Others require account creation and sync data to cloud servers. Still others have historically shared data with third parties including advertisers and analytics platforms. A few things worth understanding: data shared with a cloud server is accessible to the company that operates it, potentially to legal requests, and is vulnerable if the company is acquired, breached, or changes its business model. 'We will never sell your data' is often a limited promise — it frequently does not preclude sharing for 'analytics' or 'service improvement' purposes.
Five questions to ask before using a period tracking app
- Does the app store data on the device only, or does it sync to a server? This is the single most important question. Device-only storage is under your physical control. Server storage is under the company's control.
- Does it require an account? An account links your data to an identity — at minimum an email address. Apps that work without any account and without internet access are structurally more private.
- What exactly does the privacy policy permit? Search specifically for the word 'share' — and note what it permits beyond outright data sale. Check for third-party analytics SDKs, advertising permissions, and what happens to your data if the company is acquired.
- What happens to your data if you delete the app? Some companies retain server-stored data for years after account deletion. App-only storage is deleted when the app is removed.
- Is the app's business model transparent? A free app is funded somehow. If there is no clear paid tier or offline product model, the question of whether your data is part of the value exchange is a reasonable one to ask.
Why device-only storage is the strongest baseline
When cycle data never leaves the device, the risk surface collapses significantly. It is not accessible to the app company's servers, not exposed to the company's third-party data-sharing practices, not accessible through legal requests directed at the company, and not retained after the app is deleted. The remaining risks — physical access to your device and malware on the device — are managed by your screen lock and keeping your operating system updated.
Importantly, device-only storage does not limit analytical value. All pattern analysis, fertile window prediction, cycle statistics, and cross-cycle comparison can be computed entirely on the device. The constraint is on data leaving the device, not on what the device can do with it. If you want to share data with a healthcare provider, a local export (PDF or data summary) serves that purpose without requiring permanent cloud synchronisation.
Privacy as a feature, not a constraint
Choosing a period tracker with strong privacy architecture is not a trade-off against functionality. Device-only apps can offer the same cycle analysis, predictions, symptom tracking, and history as cloud-connected ones — the difference is that the analysis stays on your device and the company has no access to your data. For cycle data specifically, this architecture matches the sensitivity of what is being tracked.
Tonight's exercise
If you currently use a period tracker, find its privacy policy and search for the word 'share'. Note what it permits beyond outright data sale. Then check whether the app can operate entirely without an internet connection. These two checks will tell you most of what you need to know about its data posture.
**Marigold** stores all cycle data on your device and requires no account, no login, and no internet connection. There is no server to breach and nothing to share — the data stays with you. All cycle predictions, symptom tracking, and statistics are computed on the device. For a detailed explanation of the architecture, visit the Marigold app page.
No account, no server, no sharing — your cycle data stays on your device.