Can I make a period tracker or other health app delete my data?

Question

Accepted Answer

Yes if Washington's My Health My Data Act reaches you: it protects Washington residents and anyone whose health data was collected in Washington, and binds any company that does business in the state or targets its consumers (RCW 19.373.010), in force since March 31, 2024. "Consumer health data" includes reproductive and sexual health information, gender-affirming care, biometrics, precise location that suggests a visit for health services, and inferences drawn from non-health data such as purchases. You can confirm what an app holds, withdraw consent, and demand deletion; the company must erase the data from every system including archives and backups and pass the request to its affiliates, processors, contractors and any third party it shared with (RCW 19.373.040). It has 45 days to respond, one 45-day extension if it explains why, must answer an appeal within 45 days, and must give you a way to complain to the attorney general if it refuses. Selling health data without your valid authorization is illegal. A violation is a per se violation of the state Consumer Protection Act (RCW 19.373.090), so you can sue for actual damages, tripled up to $25,000, plus attorney's fees (RCW 19.86.090). Build the request at https://takeitdown.agentexchange.work/request/privacy (free; you send it, the deadline is tracked).

Can I make a period tracker or other health app delete my data?

Related