Fertility, Genetic & Wearables · Wearable & on-device health data (Health app, Cycle Tracking) · Structural / no discrete incident
Apple Watch / Apple Health app (Apple Inc.)
Headline
Apple's Health app and Watch are, on paper, the strongest of the mainstream options for reproductive and fitness data after Dobbs: Apple's iCloud security page lists Health data as end-to-end encrypted under standard…
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
Apple's Health app and Watch are, on paper, the strongest of the mainstream options for reproductive and fitness data after Dobbs: Apple's iCloud security page lists Health data as end-to-end encrypted under standard protection, and its Health privacy page says Apple 'will not be able to read' Health data synced to iCloud when two-factor authentication is on. The catch is what Apple does not publish: its U.S. transparency report does not break out requests for Health data, and data a user grants to third-party apps leaves Apple's protections. As of a July 2024 report, no case was known in which a menstrual-tracking app's data had been subpoenaed; the reported post-Dobbs prosecution in Nebraska relied on Facebook messages, not app data.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-10-16
Primary source. support.apple.com/en-us/102651 — Unverified - heuristic first draft.
Terms
Arbitration
No arbitration clause or class action waiver found in Apple Media Services Terms; California law, exclusive jurisdiction of Santa Clara County courts for U.S. users (Sec. T).
Data sharing
On-device Health data encrypted when device locked (except Medical ID). iCloud: Health listed among E2E-encrypted categories under standard data protection (iCloud security overview, Jan. 2026); Health privacy page: Apple cannot read synced Health data on iOS 12+ with 2FA. Third-party apps must request read/write permission per data type and must have a privacy policy; once shared, the app's policy governs. Transparency report does not separately count Health-data requests.
Fees and billing
None specific to Health app (no separate fee).
Contacts
Privacy contact. Not recorded.
Legal notice. Apple Inc., One Apple Park Way, Cupertino, CA 95014 (SEC EDGAR business address)
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
Sources
| Source | Claim | Tier | Status | Quote |
|---|---|---|---|---|
| Company support page · 2026-01-05 support.apple.com/en-us/102651 | whole row | Unassigned | confirmed | “15 data categories — including Health and passwords in iCloud Keychain — are end-to-end encrypted.” Quote basis: not recorded. |
| Company privacy page · 2026-09-14 www.apple.com/legal/privacy/data/en/health-app/ | whole row | Unassigned | confirmed | “Apple will not be able to read your health and activity data synced to iCloud” Quote basis: not recorded. |
| Company transparency report · 2026-10-16 www.apple.com/legal/transparency/us.html | whole row | Unassigned | confirmed | “Content data is data such as stored photos, email, iOS device backups, contacts or calendars.” Quote basis: not recorded. |
| News report (Stateline) · 2024-07-26 stateline.org/?p=13361 | whole row | Unassigned | confirmed | “There haven't been any cases where a menstrual tracking app's data has been subpoenaed yet.” Quote basis: not recorded. |
| Company terms (Apple Media Services) · 2026-09-14 www.apple.com/legal/internet-services/itunes/us/terms.html | whole row | Unassigned | confirmed | “submit to the personal and exclusive jurisdiction of the courts located within the county of Santa Clara, California” Quote basis: not recorded. |
| SEC EDGAR submissions · 2026-10-16 data.sec.gov/submissions/CIK0000320193.json | whole row | Unassigned | confirmed | “ONE APPLE PARK WAY” Quote basis: not recorded. |
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy https://www.apple.com/legal/privacy/data/en/health-app/ | Not fetched yet | NOT CONFIRMED |
| Terms of service https://www.apple.com/legal/internet-services/itunes/us/terms.html | Not fetched yet | NOT CONFIRMED |
| Website https://www.apple.com | Not fetched yet | — |
| Primary source https://support.apple.com/en-us/102651 Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
Headquarters on file: CA. Provisions of CCPA/CPRA on file:
| Provision | Type | Source |
|---|---|---|
| Right to Deletion Cal. Civ. Code § 1798.105 | hard | source |
| Right to Correction Cal. Civ. Code § 1798.106 | hard | source |
| Right to Know / Access Cal. Civ. Code § 1798.110 | hard | source |
| Right to Limit Use of Sensitive Personal Information Cal. Civ. Code § 1798.121; Cal. Code Regs. tit. 11, § 7027 | hard | source |
| Right to Data Portability Cal. Civ. Code § 1798.130(a)(3)(B)(iii) | hard | source |
| Privacy Policy / Privacy Notice Requirements Cal. Civ. Code § 1798.130(a)(5); Cal. Code Regs. tit. 11, § 7011 | hard | source |
| Sensitive Personal Information — Categories Cal. Civ. Code § 1798.140(ae) | hard | source |
| Service Provider and Contractor Contract Requirements Cal. Civ. Code § 1798.140(ag); Cal. Code Regs. tit. 11, § 7051 | hard | source |
| Applicability Threshold (2025 CPI-Adjusted) Cal. Civ. Code § 1798.140(d) | threshold | source |
| Privacy Risk Assessment — Mandatory for High-Risk Processing (Eff. Jan. 1, 2026) Cal. Civ. Code § 1798.185(a)(15); Cal. Code Regs. tit. 11, §§ 7150-7157 | hard | source |
| Right to Opt Out of Sale or Sharing Cal. Civ. Code §§ 1798.120, 1798.135 | hard | source |
| Sale vs. Sharing Distinction Cal. Civ. Code §§ 1798.140(ad), 1798.140(ah) | hard | source |
| Enforcement — CPPA and AG; Civil Penalties (2025 CPI-Adjusted) Cal. Civ. Code §§ 1798.155, 1798.199.90; Cal. Bus. & Prof. Code § 17206 | hard | source |
| Notice at Collection Cal. Code Regs. tit. 11, § 7012 | hard | source |
| Cybersecurity Audit — Annual Independent Audit Requirement (Eff. Jan. 1, 2026) Cal. Code Regs. tit. 11, §§ 7120-7124 | hard | source |
| Automated Decision-Making Technology (ADMT) — Notice, Opt-Out, and Access Rights Cal. Code Regs. tit. 11, §§ 7200-7222; Cal. Civ. Code § 1798.185(a)(16) | hard | source |