Updated
Updated · ZDNet · Jun 14
ZDNET Warns 560 Million Wearable Users Their Health Data Lacks Federal Privacy Protection
Updated
Updated · ZDNet · Jun 14

ZDNET Warns 560 Million Wearable Users Their Health Data Lacks Federal Privacy Protection

1 articles · Updated · ZDNet · Jun 14

Summary

  • More than 560 million smartwatch users worldwide — including over 1 in 4 Americans — face privacy risks because US federal law does not specifically protect health data collected by wearables.
  • HIPAA generally does not cover smartwatch and smart ring data, leaving consumers to rely on a patchwork of laws in 20-plus states and on company terms of service and privacy policies.
  • A 2025 study of 17 wearable makers found Google, Apple and Polar had the lowest privacy-risk scores, while Xiaomi, Wyze and Huawei ranked highest, underscoring uneven data-governance standards.
  • ZDNET said buyers should check whether data stays on-device or in the cloud, whether it is encrypted or shared with third parties, and be especially cautious with free or very cheap services.
  • The report also urged users to delete unused wearable data, audit connected apps and devices, and disable AI training on uploaded health information where possible.

Insights

Your wearable knows your secrets, but HIPAA doesn't protect them. Who is buying your health data and for what purpose?
If your health tracker is cheap, are you the customer or the product being sold to data brokers and insurers?
As states create a chaotic maze of privacy laws, can a federal rule truly safeguard your most personal health information?

The Hidden Dangers of Wearable Health Devices: Data Breaches, Re-Identification, and the Case for Stronger Federal Regulation

Overview

Wearable health technology offers great convenience, but it also brings hidden privacy risks. The recent Ultrahuman data breach shows how personal information, like contact details and fitness data, can be exposed even when sensitive details such as passwords and payment information are safe. After discovering the breach, Ultrahuman notified regulators, audited the incident, and informed affected users. This event highlights a bigger issue: even anonymized health data from wearables can often be traced back to individuals, raising serious privacy concerns. As wearable devices become more common, stronger protections and greater transparency are urgently needed to keep personal health data safe.

...