Hacker News Reader

Comment by jammygit | Hacker News Reader

Fitbit has a privacy policy that says they won't sell or transfer your data IIRC, but that does not prevent them from doing so in the case of a sale or merger. I hate those clauses: the hypothetical argument is always 'what if some data miner buys them' ?

This is health data we're talking about

View on HN

Ironically, the security of the data is probably higher when controlled and operated by Google. That protection is at the cost of linkage with the other data which Google has.

If it gets linked to your other data, it's already breached.

> If we are involved in a merger, acquisition, or sale of assets, we will continue to take measures to protect the confidentiality of personal information and give affected users notice before transferring any personal information to a new entity.

from https://www.fitbit.com/legal/privacy-policy

"we're giving you notice. You can't do anything, but we are letting you know."

Can you not delete it first? If you really can’t do anything at all, that’s rough

Interestingly, if we had something like the GDPR in the USA, we should be able to force them to delete our data before the merger. I assume people in the EU who may have Fitbit devices might be able to have their data scrubbed from the Fitbit servers. Also they do use open formats if I remember correctly so some people have utilities to extract data and chart it and such.

Reply on news.ycombinator.com