A period tracker downloaded by millions scores so poorly on privacy that researchers gave it a 2 out of 10.
Stardust, an app trusted by women to log their menstrual cycles, ovulation windows, and fertility data, is funneling that intimate information directly to Facebook’s servers and to data brokers whose business model depends on selling behavioral profiles to advertisers. The app’s privacy failure isn’t a bug—it’s the business model. And it reveals a systemic problem: the apps women rely on to understand their own bodies are actively monetizing their reproductive health.
- The Privacy Score: Stardust received a 2 out of 10 privacy rating from researchers at Privacy International, placing it among the worst-performing health apps evaluated.
- The Data Pipeline: The app shares reproductive health data with at least 10 third parties, including Meta Platforms, through an embedded Facebook SDK that operates without explicit user notification.
- The Legal Gap: HIPAA does not cover most consumer health apps, leaving period trackers in a regulatory gray zone where intimate reproductive data can be shared with advertisers through a buried terms-of-service disclosure.
Researchers at Privacy International evaluated Stardust and found it shared data with at least 10 third parties, including Meta Platforms (Facebook’s parent company). For context, a score that low suggests almost no meaningful privacy protections exist between a user’s most intimate data and the companies buying access to it. Research published in the ACM Digital Library examining user behavior after the overturn of Roe v. Wade documented similar concerns, noting that the most downloaded period-tracking app worldwide in 2022 faced accusations of sharing sensitive health data with Facebook—a pattern that extends well beyond any single application.
What makes this worse is the silence.
Stardust’s privacy policy doesn’t explicitly tell users that their period data, ovulation predictions, and sexual activity logs are being transmitted to Facebook. Users who download the app to track their reproductive health—a deeply personal decision—have no clear warning that their cycle data becomes part of Facebook’s advertising apparatus. The app collects the information. Facebook receives it. Advertisers bid on access to the behavioral profile it creates. The woman who entered the data often never knows.
How Does a Period Tracker Become an Advertising Tool?
The mechanics work like this: when you open Stardust and log your period, the app doesn’t just store that locally on your phone. It sends signals back to Facebook’s servers through what’s called the Facebook SDK—a software development kit embedded in thousands of apps that acts as a data pipeline. Facebook doesn’t need to know the specific dates of your cycle. It needs to know that you’re the kind of person who uses a period tracker, when you use it, how often you engage with fertility features, whether you’re searching for pregnancy information. That behavioral signal—your interest in reproductive health, your fertility status, your family-planning timeline—becomes a targeting vector. Advertisers can then reach women in specific fertility windows with pregnancy tests, prenatal vitamins, baby formula, or abortion-restriction messaging.
This isn’t speculation. It’s the documented playbook of behavioral advertising, and it has a historical precedent that should alarm anyone paying attention to data collection practices in the digital era.
• Stardust received a 2 out of 10 privacy score from Privacy International, among the lowest recorded for any health app category
• The app shares data with at least 10 third parties, including Meta Platforms, through embedded tracking infrastructure
• HIPAA protections do not apply to consumer health apps disconnected from healthcare providers, leaving tens of millions of users without federal data protections
Why the Cambridge Analytica Parallel Is Not Coincidental
The Cambridge Analytica scandal exposed how political operatives harvested personal data from millions of Facebook users without meaningful consent and built psychological profiles to micro-target them with political messaging. It revealed the same structural vulnerability now present in period tracking: the ability to infer intimate details about a person’s life from behavioral signals, then weaponize that inference for persuasion. Cambridge Analytica used Facebook data, third-party data brokers, and psychological profiling to identify voters in specific emotional or ideological states. Stardust’s data pipeline uses the same architecture—app data collection, third-party transmission, behavioral inference, and targeting—but the target is reproductive health.
The consent mechanism is equally thin in both cases: a privacy policy most users never read, buried in app settings. As documented in the analysis of behavioral microtargeting that defined the Cambridge Analytica operation, the power of this model lies precisely in its invisibility to the people it affects. The persuasion vector in Stardust’s case isn’t political messaging; it’s consumer advertising and potentially health-related disinformation. But the structural logic is identical.
The difference is scale and intimacy. Period trackers are downloaded by tens of millions of women worldwide. They collect data at the moment of maximum vulnerability—when a woman is logging information she wouldn’t share with most people in her life. That data then flows into the same Facebook advertising ecosystem that has already been caught manipulating user behavior at scale.
• A study published in PMC examining mHealth app privacy found that evidence for data privacy issues in health applications remains underexplored, with most analysis focused on security rather than the third-party data-sharing practices that pose the greatest risk to users
• Research on commercial data practices in FemTech published in 2026 confirms that apps covering fertility, menstruation, and menopause increasingly shape how users manage intimate health decisions—while the commercial data infrastructure behind them remains largely opaque
• User awareness of data-sharing practices in reproductive health apps remains critically low, with most consent obtained through terms-of-service agreements that few users read in full
What Happens to Your Reproductive Data After It Leaves Your Phone?
Privacy International’s research didn’t stop at Stardust. The organization evaluated multiple period-tracking apps and found similar patterns across the category. Apps marketed as “women’s health” tools are systematically sharing reproductive data with third parties. Some apps were more transparent than others, but the underlying business model remained consistent: collect intimate health data, monetize access to it.
The legal framework that allows this is thin. The Health Insurance Portability and Accountability Act (HIPAA) doesn’t cover most consumer health apps because they’re not connected to a healthcare provider or health plan. The Federal Trade Commission has authority to police “unfair or deceptive” practices, but enforcement is slow and penalties are often treated as a cost of doing business. No federal privacy law specifically protects reproductive health data. States like California have broader privacy laws, but they contain exemptions and loopholes. The result: period trackers exist in a regulatory gray zone where they can collect some of the most sensitive data a person generates and share it with advertisers, provided they disclose it somewhere in their terms of service.
Is Reproductive Health Data Being Used Against the Women Who Shared It?
For women using these apps, the stakes are concrete. Your period tracker knows when you’re fertile. It knows when you’re trying to conceive. It knows if you’ve missed a period—a signal that could indicate pregnancy, miscarriage, or health problems. That data, once it reaches Facebook’s servers, becomes part of a profile that advertisers, data brokers, and potentially law enforcement can access. In states where abortion is restricted, that reproductive health signal could theoretically be used to identify women seeking abortion services or contraception. Even in states where abortion remains legal, the data creates a permanent record of your reproductive timeline that exists independent of your control.
This is the trajectory that digital activism following Cambridge Analytica warned about: once behavioral data infrastructure is normalized for one purpose—political targeting, consumer advertising—it becomes available for purposes its original users never anticipated. The women logging their cycles in Stardust are not consenting to become data points in an advertising ecosystem. They are consenting, in the narrowest legal sense, to a privacy policy they were never meaningfully asked to read.
Stardust’s 2 out of 10 privacy score is a number. The actual harm is measured in the erosion of privacy around one of the most intimate aspects of human life—the ability to track your own body without that information becoming a commodity.
The question now is whether regulators will act before millions more women unknowingly hand their reproductive data to Facebook. So far, the silence from federal privacy advocates suggests they won’t.
