New study shows how popular apps including Grindr, OkCupid, Tinder, and the period-tracking apps Clue and MyDays share intimate user data with data brokers
A new study shows how information about your sexuality, religion, and location is sent straight from phones to data brokers
Context & Ripple Effects
Consumer Reports' study lands on a decade-long paper trail: a [[a:835723|2015 survey already found popular apps shipping email and location to Apple, Google, and other third parties]], and researchers have since shown Grindr users can be pinpointed through the app's own public APIs and via colluding trilateration attacks on gay dating apps. What is new here is the destination — not ad SDKs like the Facebook integration BuzzFeed flagged in 2018, but data brokers receiving sexuality, religion, and location straight from the phone.
First-order effects
- Users of Grindr, OkCupid, Tinder, Clue, and MyDays learn that their most sensitive attributes are leaving their phones to brokers they never chose, with no direct relationship or opt-out at the point of collection.
- The five named apps now carry documented evidence tying them to broker pipelines, shifting the reputational risk from anonymous 'apps' to specific brands whose core product is trust around intimate life.
Second-order effects
- App developers face renewed pressure over what embedded SDKs silently transmit — the same accountability dynamic the Facebook SDK reporting triggered — making broker-sharing a procurement question for every dating and health app.
- Advertisers and brokers buying sensitive-category segments come under scrutiny alongside the apps, since the study exposes demand-side buyers, not just supply-side collectors.
Third-order effects
- If the pattern holds from 2015 surveys through this study, sensitive-category data flows become the trigger point for platform-level permission boundaries and regulator attention, forcing apps to treat intimacy data as a liability rather than a byproduct.
- The later Gravy breach showing thousands of apps feeding location to one data company suggests the broker layer only grows more systemic — meaning incidents will increasingly implicate entire ecosystems rather than single apps.
The trend: Dating and health apps keep converting intimate user attributes into broker-sold signals, and each successive exposé moves scrutiny closer to regulating the broker layer itself rather than shaming individual apps.