In a landmark decision, a California jury has determined that Meta Platforms Inc. violated state privacy laws by collecting sensitive menstrual health data from users of the Flo Period & Ovulation Tracker app without their consent. This class-action lawsuit, initiated in 2021, accused Meta of harvesting private health information, including menstrual cycles and fertility intentions, for targeted advertising purposes, thereby breaching the California Invasion of Privacy Act.
The plaintiffs, representing millions of Flo users, alleged that both Flo Health and Meta clandestinely gathered and utilized their intimate health data without proper authorization. The lawsuit also implicated other tech giants, including Google and ad analytics firms AppFlyers and Flurry. Notably, Google settled the case in July 2025, and Flo Health reached a settlement earlier this month.
Lead trial attorneys Michael P. Canty and Carol C. Villegas emphasized the significance of the verdict, stating, This verdict sends a clear message about the protection of digital health data and the responsibilities of Big Tech. Companies like Meta that covertly profit from users’ most intimate information must be held accountable. Today’s outcome reinforces the fundamental right to privacy—especially when it comes to sensitive health data.
Meta has expressed strong disagreement with the jury’s decision. A company spokesperson stated, We vigorously disagree with this outcome and are exploring all legal options. The plaintiffs’ claims against Meta are simply false. User privacy is important to Meta, which is why we do not want health or other sensitive information, and why our terms prohibit developers from sending any.
This case underscores the growing scrutiny over how technology companies handle user data, particularly sensitive health information. The verdict may set a precedent for future litigation concerning digital privacy and the ethical responsibilities of tech corporations in managing user data.
