💣 Flo App Accused of Deceit—Class Action Exposes Alleged Secret Deals with Meta and Google

A major court case has started in San Francisco against the popular period tracking app, Flo. Users of the app claim it shared their private health details without their permission. The class action lawsuit was filed in 2021. It says Flo sent this sensitive data to large companies like Meta (formerly Facebook), Google, and other analytics firms.

Menstrual Tracking App Accused of Sharing Sensitive Data

Flo is a widely used app launched in 2016. It helps people track their periods, ovulation, moods, symptoms, and even sexual activity. Many users trusted the app with very personal information. But now, they say that trust was broken.

In court, the users’ lawyer told the jury that this case is about how seriously big tech companies treat women’s privacy. She said this data sharing was not a mistake, but part of how companies like Meta make money. According to her, Flo tricked users into believing their data was safe, while it was being passed on to third parties for ads and analytics.

Tech Giants Google and Meta Named in the Lawsuit

The lawsuit named multiple companies, including Meta, Google, AppsFlyer, and Flurry. Some of these companies have already settled with the users. Google reached a settlement earlier this month. Flurry settled in March. The users also dropped their claims against AppsFlyer in 2022.

Now, the trial will focus on the remaining two—Flo and Meta.

The court was told that Flo shared user data without making it clear in its privacy policy. The shared data included names, health history, and other private details. Lawyers for the users say that this violates laws protecting medical information in California.

💻 AI Turns Rogue—LazyHug Malware Learns Like ChatGPT, Steals Data Silently

Flo’s legal team says the app never shared any health-related data with others. They also say users agreed to the app’s privacy terms when they signed up. According to them, the information shared was only used to improve the app’s performance. They also argued that Flo is not a health care provider and clearly states so in its terms of use.

Meta’s lawyer said Facebook didn’t receive or listen in on any user conversations from the Flo app. The lawyer said Meta told app makers like Flo not to send sensitive data and required them to inform users if any data was being shared.

Legal Arguments Focus on Privacy Laws and User Agreements

A key point in the case is whether Flo should be treated like a health app under California law. If it is, then stricter rules about privacy may apply. The users argue that because the app tracks health-related information, it should follow the California Confidentiality of Medical Information Act.

Flo’s lawyers say otherwise. They say the app includes clear language stating it is not a licensed medical care provider. They also point to the terms of service, which every user agrees to before using the app. According to them, these terms include a one-year deadline to file legal claims, and the users waited too long.

The trial also looks at whether Facebook broke the California Invasion of Privacy Act. This law is meant to stop companies from secretly listening to or recording private conversations. Meta’s lawyer said Facebook did not get any private messages or data from Flo users and therefore could not have recorded anything.

The trial is being heard at the Philip Burton Federal Courthouse. The judge is overseeing the process, and witness testimony will begin as the trial continues this week.

This case has drawn attention because it touches on big issues like digital privacy, health data protection, and how tech companies use personal information. With millions of people using apps like Flo, the outcome of this trial could have a major impact on how private data is handled in the future.

Renuka Bangale
Renuka Bangale
Renuka is a distinguished Chartered Accountant and a Certified Digital Threats Analyst from Riskpro, renowned for her expertise in cybersecurity. With a deep understanding of cybercrimes, malware, cyber warfare, and espionage, she has established herself as an authority in the field. Renuka combines her financial acumen with advanced knowledge of digital threats to provide unparalleled insights into the evolving landscape of information security. Her analytical prowess enables her to dissect complex cyber incidents, offering clarity on risks and mitigation strategies. As a key contributor to Newsinterpretation’s information security category, Renuka delivers authoritative articles that educate and inform readers about emerging threats and best practices.

TOP 10 TRENDING ON NEWSINTERPRETATION

Cyber Attacks on Space Infrastructure: Satellites, GPS and the Ground Systems Behind Them

From the Viasat KA-SAT hack to GPS jamming over the Baltic, a research guide to how attackers target satellites, navigation signals and ground stations, and why it matters on Earth.

How AI Agents Are Used in Cyber Attacks: From Assisted Hacking to AI-Orchestrated Espionage

Attackers now use AI agents to scan networks, write exploits and run extortion campaigns. A research guide to documented cases, including the first reported AI-orchestrated espionage campaign, and what defenders should do.

Cyber Attacks on AI and LLMs: How Attackers Target Large Language Models

Prompt injection, data poisoning, model theft and jailbreaks: a research guide to how attackers target AI systems and large language models, with real cases and defences.

French Supermarket Refrigeration Cyberattack: How Hacking the Cold Chain Can Endanger Lives

In October 2026 attackers heated refrigeration cabinets in hundreds of French supermarkets to as much as 50°C. No one was hurt, but the attack shows how hacking the cold chain can endanger lives through fire, food poisoning and spoiled medicines.

Cyberattacks on Nuclear Facilities: Stuxnet, Kudankulam and the Limits of Air Gaps

Stuxnet, the Davis-Besse worm and malware at India’s Kudankulam plant: what they show about cyber risk at nuclear facilities and the limits of air gaps.

Triton: When Hackers Target the Safety Systems That Prevent Industrial Disasters

The 2017 Triton attack targeted the safety systems that prevent industrial disasters. What happened, who was charged, and how plants protect their last line of defence.

Cybersecurity Risks in Smart Cities: When Connected Infrastructure Fails

How connecting traffic control, emergency alerts and utilities concentrates cyber risk in cities, what the Dallas and Atlanta incidents showed, and what governments recommend.

Weaponized Drones: Hijacking, GPS Spoofing and Emerging Cyber Warfare Risks

How drones can be hijacked, jammed or misled by GPS spoofing, what researchers have demonstrated, and why governments treat drone fleets as a security risk.

Ransomware Attacks on Hospitals: How Healthcare Cyberattacks Put Patients at Risk

How ransomware against hospitals and their suppliers delays care and endangers patients, what the Düsseldorf and WannaCry cases show, and what research says about deaths.

Operational blunder exposes massive Russian cyber espionage attack on Ukrainian prosecutors

A major cyberattack has compromised the email accounts of...

Cyber Attacks on Space Infrastructure: Satellites, GPS and the Ground Systems Behind Them

From the Viasat KA-SAT hack to GPS jamming over the Baltic, a research guide to how attackers target satellites, navigation signals and ground stations, and why it matters on Earth.

French Supermarket Refrigeration Cyberattack: How Hacking the Cold Chain Can Endanger Lives

In October 2026 attackers heated refrigeration cabinets in hundreds of French supermarkets to as much as 50°C. No one was hurt, but the attack shows how hacking the cold chain can endanger lives through fire, food poisoning and spoiled medicines.

Cyberattacks on Nuclear Facilities: Stuxnet, Kudankulam and the Limits of Air Gaps

Stuxnet, the Davis-Besse worm and malware at India’s Kudankulam plant: what they show about cyber risk at nuclear facilities and the limits of air gaps.

Triton: When Hackers Target the Safety Systems That Prevent Industrial Disasters

The 2017 Triton attack targeted the safety systems that prevent industrial disasters. What happened, who was charged, and how plants protect their last line of defence.

Cybersecurity Risks in Smart Cities: When Connected Infrastructure Fails

How connecting traffic control, emergency alerts and utilities concentrates cyber risk in cities, what the Dallas and Atlanta incidents showed, and what governments recommend.

Ransomware Attacks on Hospitals: How Healthcare Cyberattacks Put Patients at Risk

How ransomware against hospitals and their suppliers delays care and endangers patients, what the Düsseldorf and WannaCry cases show, and what research says about deaths.

FBI warns of AVrecon malware targeting outdated routers linked to proxy based cybercrime

A serious cybersecurity warning has been issued regarding commonly...

Related Articles

Popular Categories