This Consumer Health Data Privacy Notice supplements our broader privacy practices and explains how health-related information may be collected, used, disclosed, and protected for individuals residing in jurisdictions that provide specific legal protections for consumer health data. This notice applies only to information that qualifies as consumer health data under applicable laws and should be read together with our general privacy disclosures. In situations where this notice and other privacy provisions address the same subject matter, the terms of this notice govern with respect to consumer health data.
Consumer health data may include a wide variety of information connected to an individual’s physical condition, mental well-being, healthcare activities, fitness routines, or other indicators that may reveal or suggest aspects of health. Applicable laws often define this category broadly, meaning that information does not need to originate directly from a healthcare provider to be considered health-related. Data that can reasonably be associated with health status, wellness activities, treatment history, medical interests, or similar personal characteristics may fall within this category.
The specific information collected depends largely on the products, services, applications, and features a user chooses to access. Certain connected devices and digital tools may gather information associated with physical wellness and activity tracking. Examples may include measurements related to body size, physical movement, exercise habits, heart activity, sleep patterns, fitness progress, and other wellness metrics. Some products may also provide more advanced analytical features that generate additional measurements concerning body composition, physical performance, or related indicators. Information generated through the use of these features may be considered consumer health data when it relates to health monitoring, evaluation, or personal wellness objectives.
Location-related information may also, under certain circumstances, be categorized as consumer health data when it can reasonably reveal health-related activities or behaviors. For example, location patterns connected to visits to healthcare facilities, wellness centers, fitness locations, or similar destinations may indicate information regarding an individual’s health interests or activities. As a result, certain location information associated with device usage may receive protections applicable to consumer health data when required by law.
Consumer health data may also be received through integrations with third-party products, applications, platforms, or services that users voluntarily connect to their accounts. When users authorize such connections, information exchanged through those integrations may include wellness metrics, activity records, health-related insights, or other data associated with personal health management. Any information received through these integrations that falls within the legal definition of consumer health data will be handled in accordance with this notice and applicable laws.
Information may be collected directly from users when they choose to enter data, activate features, complete account settings, participate in wellness programs, or otherwise interact with products and services. Consumer health data may also be generated automatically through the operation of connected devices, mobile applications, software tools, and online services. In addition, information may be obtained from authorized third-party sources when users provide permission for such access or when permitted by law.
The primary reason for collecting consumer health data is to provide requested products, services, and functionality. Information may be used to operate devices, support wellness features, deliver personalized experiences, improve performance, troubleshoot technical issues, maintain security, and enhance the overall quality of products and services. Consumer health data may also be used to conduct internal research, develop new features, improve accuracy, and better understand how users interact with available technologies.
In certain situations, consumer health data may be processed to comply with legal obligations, respond to lawful requests, protect rights and safety, investigate potential violations, or fulfill other purposes authorized under applicable regulations. Additional uses may occur when users have provided consent or when processing is otherwise permitted by law.
Consumer health data may be disclosed only in limited circumstances and for legitimate business purposes. Information may be shared with service providers, contractors, and vendors that assist in supporting products, maintaining infrastructure, processing transactions, analyzing performance, delivering requested services, or performing related operational activities. These parties are generally required to handle information in accordance with contractual obligations and applicable legal requirements.
Information may also be transferred as part of corporate transactions such as mergers, acquisitions, reorganizations, financing arrangements, asset sales, or other business transitions. Additionally, consumer health data may be disclosed when necessary to comply with legal processes, governmental requests, court orders, regulatory obligations, or other lawful requirements. In situations where users have expressly authorized sharing with affiliated organizations, partners, or integrated services, information may also be disclosed in accordance with those permissions.
Residents of certain states may possess specific rights regarding their consumer health data. Depending on applicable law, these rights may include the ability to confirm whether consumer health data is being processed, access information maintained about them, request corrections to inaccurate records, obtain copies of certain information, request deletion of data, or withdraw previously granted consent for specific processing activities. Some individuals may also have the right to restrict or object to certain uses and disclosures of consumer health data.
Requests to exercise privacy rights may be submitted using the contact methods and procedures described in our privacy materials. Before responding, reasonable verification measures may be required to confirm identity and protect sensitive information. Once verified, requests will be reviewed and addressed in accordance with applicable legal requirements and response timelines.
If a privacy request cannot be fulfilled in whole or in part, affected individuals may be informed of the reason for the decision where required by law. Certain jurisdictions may also provide a formal appeal process that allows individuals to seek further review. In addition, users may have the option to contact regulatory authorities or consumer protection agencies if they believe their rights have not been properly addressed.
Protecting consumer health data remains an important responsibility. We maintain administrative, technical, and organizational measures designed to help safeguard information against unauthorized access, misuse, disclosure, alteration, or destruction. Security practices are reviewed periodically to support the ongoing protection of sensitive information and to address evolving risks and technological developments.
We remain committed to transparency regarding our handling of health-related information. Policies, procedures, and operational practices may be updated periodically to reflect changes in legal requirements, industry standards, technological advancements, and user expectations. By providing clear disclosures and meaningful privacy choices, we aim to support responsible data practices and foster confidence in the use of our products and services.
Our objective is to ensure that individuals understand how consumer health data is managed and to provide appropriate controls over that information. Through ongoing privacy efforts, continuous review of compliance obligations, and a commitment to responsible data stewardship, we strive to maintain an environment where health-related information is handled with care, respect, and accountability.