U.S. regulators said late Wednesday that Easy Healthcare Corp.’s ovulation tracker app Premom shared users “sensitive” personal information with third parties, and users’ health data with Google and a mobile marketing-analytics company.
The app also failed to notify consumers of those unauthorized disclosures, the Federal Trade Commission said.
The FTC has proposed that Easy Healthcare, a privately held company which operates the app, would be barred from sharing the personal health data with third parties for advertising, and be required to get consent before sharing heath data for any other purpose. The company would also be required to tell consumers how their data would be used.
Regulators also imposed a $100,000 civil penalty for violating the Health Breach Notification Rule. The FTC said that Easy Healthcare also has agreed to pay a total of $100,000 to Connecticut, the District of Columbia and Oregon, states that worked with the FTC in the matter, for violating their respective laws.
In February, the FTC imposed a $1.5 million penalty on telehealth and prescription drug discount provider GoodRx Holdings Inc.c
GDRX,
for sharing users’ personal health data with Meta’s
META,
Facebook, Alphabet’s
GOOG,
GOOGL,
Google and other third parties without consent. That action also involved the Health Breach Notification Rule.
