Privacy, Data Sharing, and Data Security Policies of Women’s mHealth Apps: Scoping Review and Content Analysis

Abstract

Background Women’s mobile health (mHealth) is a growing phenomenon in the mobile app global market. An increasing number of women worldwide use apps geared to female audiences (female technology). Given the often private and sensitive nature of the data collected by such apps, an ethical assessment from the perspective of data privacy, sharing, and security policies is warranted. Objective The purpose of this scoping review and content analysis was to assess the privacy policies, data sharing, and security policies of women’s mHealth apps on the current international market (the App Store on the Apple operating system [iOS] and Google Play on the Android system). Methods We reviewed the 23 most popular women’s mHealth apps on the market by focusing on publicly available apps on the App Store and Google Play. The 23 downloaded apps were assessed manually by 2 independent reviewers against a variety of user data privacy, data sharing, and security assessment criteria. Results All 23 apps collected personal health-related data. All apps allowed behavioral tracking, and 61% (14/23) of the apps allowed location tracking. Of the 23 apps, only 16 (70%) displayed a privacy policy, 12 (52%) requested consent from users, and 1 (4%) had a pseudoconsent. In addition, 13% (3/23) of the apps collected data before obtaining consent. Most apps (20/23, 87%) shared user data with third parties, and data sharing information could not be obtained for the 13% (3/23) remaining apps. Of the 23 apps, only 13 (57%) provided users with information on data security. Conclusions Many of the most popular women’s mHealth apps on the market have poor data privacy, sharing, and security standards. Although regulations exist, such as the European Union General Data Protection Regulation, current practices do not follow them. The failure of the assessed women’s mHealth apps to meet basic data privacy, sharing, and security standards is not ethically or legally acceptable.

Omnichannel Communication to Boost Patient Engagement and Behavioral Change With Digital Health Interventions

“…However, we do not see this as a bypass for adhering to the appropriate health care and data privacy regulations. Recently, there have been worrisome reports of the breaches of data privacy and data security by wellness mobile apps [73][74][75]. In addition to data breaches, other concerns include the aggregation of multisource data and generating digital twins without appropriate access control for the individual represented by the digital twin.…”

Pregnancy in the digital health era: exploring digital health usage amidst the COVID-19 pandemic

“…The spread of misinformation regarding the COVID-19 vaccine during pregnancy online, especially on social media, and the vague or inconsistent communication by credible health authorities contributed to participants concern about the credibility of online sources. Further, poor data privacy, sharing, and security standards in pregnancy apps is widespread [44]. Thus, the quality of information and data privacy of pregnancy apps should be more formally assessed.…”

Permissions vs. Privacy Policies of Apps in Google Play Store and Apple App Store

“…In another work [9] the authors studied 23 mHealth apps in depth; all collected personal health-related data and allowed behavioral tracking, and 61% of the apps allowed location tracking. Only 70% had a privacy policy displayed.…”