Mozilla's latest privacy tests landed with a thud for anyone who has ever logged a symptom, a cycle, or a mood into a period tracker. The researchers found one app that was, in their words, "squeaky clean," while another, Stardust, was caught sharing users' health data with an analytics firm. That gap is not a minor footnote. It is the entire story, and it is a story about how little we can assume from the apps we trust with our most personal information.
Let's be direct: if you are using a period tracker, you are handing over a map of your body's rhythms, your sexual activity, your medication schedules, and sometimes your emotional state. This is not the same as letting a social media app know your location. This is data that, in the wrong hands, could affect your insurance, your employment, or your personal safety. The fact that two apps tested in the same round can produce such wildly different results tells us that "privacy" is not a feature you can assume; it is a contract you have to read. And most people will not read the fine print. They will see a clean interface and a five-star rating, and they will tap "allow."
What this means for you, practically, is that the choice of a period tracker is not a lifestyle decision. It is a security decision. We would tell any reader who asks us about this: treat the app like you would treat a medical professional. Ask who else gets to see the record. Ask where the data lives. Ask what happens if the company is acquired or if the service shuts down. If the answer is vague, or if the privacy policy is written in language that requires a law degree to parse, that is your answer. Mozilla's finding is not an isolated incident; it is a reminder that the market is still a patchwork of standards, and some players are operating with far fewer scruples than others.
The deeper issue here is not just Stardust. It is the illusion of choice. When a product is free, or nearly free, you are often the product being sold. Health data is among the most sensitive data you possess, and it is being treated by some companies as just another revenue stream. We are not saying all period trackers are malicious. We are saying that "squeaky clean" is not the baseline; it is the exception that deserves your attention. The next time you open an app to log a symptom, ask yourself whether the convenience is worth the exposure. For many people, it might still be. But that should be a conscious decision, not a silent default. The detail to watch, as this space matures, is whether regulators start treating health data from apps with the same seriousness they treat data from hospitals. Until then, the burden is on you.