
Lawsuit claiming Flo Health app shared intimate data with Facebook greenlit as Canadian class action
CBC
A Canadian class-action lawsuit accusing a popular fertility tracking app of sending users' intimate health information — including details about their periods, sex lives and pregnancies — to companies like Facebook without their knowledge has been allowed to go ahead.
The claim, certified in B.C. Supreme Court on Thursday, said Flo Health collected their highly sensitive personal information, promised to keep that information private and then knowingly shared the data with third parties.
"There's been a significant disclosure of the private information of Canadian women, and we're excited to be proceeding to the next step with the case," said Richard Parsons, who is co-counsel on the case.
The ruling is a pivotal step forward for the case. It will test lagging Canadian privacy laws in a time when millions of people regularly pour their personal information into their phones. If the claim succeeds, more than one million people who used Flo in Canada over a three-year period will be eligible to claim damages.
None of the lawsuit's claims have been proven in court. In a statement to CBC News on Friday, Flo said it "has never sold user information or shared user information with third parties for the purposes of advertising."
"Flo will vigorously defend against allegations stipulated in the case."
Flo is an app that tracks users' fertility and periods. Users enter personal information about their height, weight, sex lives and reproductive cycles — including details about their periods, vaginal discharge, pregnancies, miscarriages, births and postpartum symptoms.
Jamie Kah Cate Lam, the lead plaintiff in the class action, said she used the Flo app for 18 months while she and her husband were trying to conceive. The B.C. woman gave the app information about the different stages of her menstrual cycle and how often she and her husband were having intercourse, according to an affidavit.
After her son was conceived in 2017, Lam continued to use the app in pregnancy mode. Her son was born in April 2018, and she later deleted the app.
In 2019, The Wall Street Journal published an article saying Flo gave users' sensitive personal information to Facebook and other companies without their knowledge. Testing commissioned by the newspaper showed Flo told Facebook when an app user was on their period or trying to get pregnant.
Lam declined an interview request. In her affadavit, she said she was "shocked to learn that Flo Health had disclosed my personal information to Facebook and others, despite my clear understanding when I downloaded the Flo App that my information would be kept private."
The U.S. Federal Trade Commission (FTC) launched an investigation following the Journal's story, and alleged the company had broken its promise to keep users' data private by sharing it.
As part of a settlement with the U.S. agency in 2021, Flo was required to obtain users' consent before sharing their health information. The company did not admit guilt in the settlement, and has said it does not share data without people's permission.
"Flo did not at any time share users' names, addresses or birthdays with anyone. We do not currently, and will not, share any information about our users' health with any company unless we get their permission," the company said in a statement at the time.