Stardust's privacy policy said it may share “anonymized, encrypted” data to third parties “whether or not legally required”, before being changed after pushback
If your only advice around cyber security and privacy in the reproductive justice space is to tell ppl to delete their period apps, politely, tap out of the conversation.
Menstrual tracking app Stardust is one of Apple's top three most-downloaded free apps right now. It's also one of few apps that has said it will voluntarily—without being legally required to—comply with law enforcement if it's asked to share user data. https://www.vice.com/...
What we did was implement an encrypted wall between our users personally identifiable information (email/phone/apple id/ etc) and what they actually do on the Stardust app. When you create an account on Stardust you generate a unique encryption key (on your phone) (4/8)
Because in the end, they're going to have to comply with legal requests. They can (and probably will) push back on overbroad or ill-formed requests, but there's going to be a non-trivial residual where they're just going to have to comply
New: #1 period tracking app on App Store says it may simply hand over data to cops without a warrant. Stardust has gained momentum by pitching itself as a privacy period app. But its policy says it may give cops data “whether or not legally required” https://www.vice.com/...
they have to comply with law enforcement requests. they are going to turn over the data. financial intermediaries too https://twitter.com/... https://twitter.com/...
Peak conspirituality: an “astrology-focused” menstrual app has preemptively stated it will turn over data to the government without a warrant. https://www.vice.com/...
Update: In response to our reporting, Stardust changed its privacy policy to omit the phrase about cooperating with law enforcement “whether or not legally required.” https://www.vice.com/...
I don't think these threat models are likely because they are fishing expeditions with too many targets. More likely period app data will be used as a secondary source once a primary reason to investigate is found (e.g. location data, email or chat logs, etc). That's the threat.
2 days ago: We spent the last month racing to build this. If we get subpoenaed by the gov't...your data is completely anonymized. You are the only person who can see it. Today: Strike that. We'll tell all. And also, we [silently] removed the end-to-end ref in our privacy policy. …
a few people recommended stardust when i put out a call for trustworthy period trackers, and on tiktok the company made a show of promising to protect its users :/ https://twitter.com/... https://twitter.com/...
Seeing an app boasting an “encrypted wall” gives me about as much confidence as a car manufacturer telling me they'll protect me with “exploding crash pillows.” Even if you mean “air bags” and the care is actually safe, you're not inspiring confidence using the wrong term. https:…
Developers of period trackers and fertility apps are working on ways to anonymize user data in response to the Supreme Court's ruling that struck down the constitutional right to an abortion. https://www.wsj.com/...
Apps that help people monitor their menstruation and fertility can also be troves of personal data; deleting the app isn't always enough to clean up your #digital breadcrumbs. #data #privacy https://www.wsj.com/... via @WSJ @CordiliaJames @sharatibken https://twitter.com/...
You should, of course, delete your period tracker app and not trust any of this. But, I can't help but note - these are overwhelmingly companies started by women and run by women. And it's just another way women pay the price for men's shitty behavior. https://www.wsj.com/...
If you think your privacy is under attack, you need to find a way to delete this app and do it NOW. If you need an app to track your periods, you need to learn how to use a calendar (don't @ me). This data will be used against you. https://www.wsj.com/...
the number one period tracker on the app store just put it in writing that they'll voluntarily—without even being legally required to—hand over your info to law enforcement if asked https://www.vice.com/...
So much for their vaunted E2EE... “The data is anonymized” As .@datachick points out with some regularity, it's impossible to fully and truly sanitize and anonymize data like this. There will always be breadcrumbs. https://twitter.com/...
The period tracker discourse post-Roe is fear mongering without a threat model. One threat is Texas of other AG asking for all data they have to see if anyone who missed a period currently doesn't have a baby 9 months later. Another is they ask regularly https://www.vice.com/...
Just so you know, 99% of privacy policies say that they will give up your information if requested by authorities. As such, go over all your apps and start deleting anything everything that isn't a must. https://twitter.com/...
Why do these apps need to store data outside of the phone? The iPhone has a pretty large hard-disk that is also backed up free (to the developer) of charge. https://twitter.com/...
“mercury is in retrograde, also i'm gonna give your period info to the cops” — stardust, basically read @samleecole on the #1 period tracker in the app store that will hand over your data without a warrant, and implications in a post-Roe US: https://www.vice.com/...
“We may disclose your anonymized, encrypted information to third parties ... and comply with or respond to law enforcement or a legal process or a request for cooperation by a government or other entity, whether or not legally required.” https://www.vice.com/... via @motherboard
Tech companies are silent about their users' data re abortion rights. That's a tacit acknowledgment that data is so valuable, that they would rather keep on collecting it, even if people are thrown in jail, fined or killed https://www.protocol.com/...
With Roe overturned, period-tracking apps raise new worries Period-tracking apps have been criticized for bad privacy practices. Here's how to track your cycle without sharing data with companies, employers, insurers or the government. https://www.washingtonpost.com/ ...
WE ARE BACK ON INSTAGRAM! 👏 Thank you to everyone who helped call attention to the situation and uplift https://abortionfinder.org/ as a trustworthy resource for finding access to abortion care. ❤️ https://twitter.com/...
Corporations will hand your info over to law enforcement in a heartbeat. Corporations don't give one single fuck about your rights beyond what they can use for marketing. Your google searches. Your GPS directions. Your period trackers. They'll *automate* turning it over. https://…
Tech companies & data brokers collect & store SO much user data for long periods of time which makes them huge targets for subpoenas & law enforcement requests. Tech companies can try to come up with ways to stall or fight these requests but sometimes they literally can't say no.
Meta's new privacy policy goes into effect 7/26. Here's a screenshot of what data they collect. This is why women in states where abortion is banned SHOULD NOT communicate via Messenger or Instagram or post in groups. [Screenshots of Meta's updated privacy policy]
“In essence, companies' silence says they think the data collection and sale process is so opaque, users won't raise a fuss about it. And data itself is more valuable to the companies than helping people have access to life-saving health care.” https://www.protocol.com/...