Sexual-Health & Dating-App Data Practices
STI/HIV-Status Sensitivity, Location Data, and What Dating Apps Share
Evidence grade 4 of 5, Strong. Read how the Atlas grades evidence.
The written rationale for this grade is still being prepared.
- FDA
- Not Applicable (privacy/consumer-protection domain)
Reference only. Not medical advice.
What can go wrong
The downside risks are among the most severe in this entire library: outing, discrimination, blackmail, criminalization in hostile jurisdictions, and physical danger, on top of ordinary ad targeting and profiling. HIV/STI status is data that can follow a person for life if exposed.
This is something to take to a clinician. The Atlas can tell you what is known about sexual-health & dating-app data practices in general. It cannot tell you what is happening in your body, and the difference matters most for exactly the symptoms that bring people to this page.
Dating and sexual-health apps collect uniquely sensitive data: sexual orientation, HIV and STI status, sexual preferences, photos, message content, and precise location. This data is exceptionally consequential because exposure can lead to discrimination, outing, blackmail, and physical danger. There is a documented history of mishandling: in 2018 reporting showed the dating app Grindr had shared users' HIV-status data with third-party analytics vendors (Apptimize and Localytics); in 2021 Norway's data protection authority fined Grindr for unlawfully sharing user data including data revealing sexual orientation with advertisers, and the company later faced further European enforcement. Location-data brokering from apps has also been used to de-anonymize individuals. This entry summarizes documented events; practices change and vary by app.
HIV status and precise location are among the most dangerous data to leak.
What people take it for
What it is taken for. Approval, where it exists, covers only some of these.
How it works
Dating apps typically embed advertising and analytics SDKs that can transmit profile attributes, device identifiers, IP, and precise GPS location to third parties. Some of those attributes (HIV status, sexual orientation) are 'special category' data under European law and highly sensitive everywhere. Location pings are especially dangerous because a sequence of coordinates can single out a home, workplace, or identity even without a name. The data-broker market aggregates and resells such location and behavioral data.
Why HIV-status and location data are categorically different
Most data leaks cause inconvenience and ad targeting. Leaked HIV status or sexual orientation can cause discrimination, family rupture, job loss, criminalization in some jurisdictions, blackmail, and violence. Precise location data has been used to identify and out individuals, including, in widely reported cases, by linking app location data to a specific person. Because the worst-case harm is so severe, the standard for handling this data should be far higher than for ordinary consumer data, and historically several apps did not meet it.
What people get wrong
Often saidDating apps keep my orientation and status private by default
ActuallyHistory shows several apps shared sensitive attributes and location with advertisers and analytics vendors. Privacy depends on the specific app's current practices, which should be verified.
Often saidLocation sharing only matters while I am using the app
ActuallyBackground location and resold location data can build a persistent map of where you live and go, which can de-anonymize you long after a session ends.
Who profits, and who pushes back
Nobody is named here yet, because we have not done that work on this entry. Read that as unfinished. Somebody almost certainly sells this, and somebody almost certainly disputes it. Assume both until we have checked.
What we do not know
- Will U.S. law ever treat sexual-orientation and HIV-status data as the special-category data European law already does?
- Can the location-data-broker market be reined in before more de-anonymization harms occur?
- How should sexual-health apps balance useful features (status sharing, matching) against catastrophic leak risk?
At a glance
- Most sensitive fields
- HIV/STI status, sexual orientation, precise location
- Grindr HIV-data reporting
- 2018 (BuzzFeed News / SINTEF analysis)
- Norway DPA fine of Grindr
- 2021 (data-sharing with advertisers)
- Special-category data
- Sexual-orientation/health data is highly protected under GDPR
- Re-identification risk
- Location pings can de-anonymize a person
What this entry does not yet cover
What follows is unfinished work on our side, not a finding about Sexual-Health & Dating-App Data Practices. A short entry is not a safe entry.
- Timeline. We have not built the dated record of research and regulatory events.
- Cost and market. We have not documented what it sells for or who sells it.
- Supply chain. We have not mapped where it is made.
- Who uses it. We have not documented the user groups.
- What could change. No forward-looking summary yet.
- How it compares. We have not set it against the alternatives.
- Children and teenagers. We have not checked what is known about younger people.
Sources
The studies below are named and described, but not linked. You cannot open them from here and check our reading against them, which means this page is our summary of the literature rather than a document you can verify. Weigh it accordingly until the links exist.
The studies that matter
Reporting on Grindr sharing HIV-status data2018
Analysis (SINTEF) and reporting found Grindr had shared users' HIV-status and other data with third-party analytics firms; the company said it would stop sharing HIV data
Norwegian Data Protection Authority fine of Grindr2021
Datatilsynet issued a substantial fine alleging Grindr unlawfully shared user data, including data revealing sexual orientation, with advertising partners without valid consent under GDPR
Location-data de-anonymization reporting2021
Widely reported cases showed commercially available app location data can be used to identify specific individuals, underscoring the danger of precise-location sharing