What Google Is Doing With Your Fitbit Health Data
Post-acquisition changes to Fitbit's data practices raise alarm as health metrics flow into Google's ecosystem
When Google completed its $2.1 billion acquisition of Fitbit in January 2021, the company made a public commitment: Fitbit users' health and wellness data would not be used for Google ads. The promise was a condition of regulatory approval, with the European Commission requiring Google to maintain data separation for at least 10 years. But as the integration of Fitbit into Google's ecosystem has accelerated, the boundaries between Fitbit health data and Google's broader data infrastructure have become increasingly blurred.
Fitbit devices collect extraordinarily intimate data: heart rate, sleep patterns, menstrual cycles, blood oxygen levels, stress indicators, exercise habits, and GPS-tracked routes. For the more than 30 million active Fitbit users, this data represents a detailed physiological profile that, in the wrong hands or the wrong context, could be used for insurance discrimination, employment decisions, or targeted advertising based on health conditions.
Key Takeaways
- Google's commitment to keep Fitbit health data out of advertising was a regulatory condition that expires in 2031
- Fitbit accounts were migrated to Google accounts, associating health data with the same identity used for ads and search
- Consumer wearable health data is not protected by HIPAA, leaving Fitbit users with fewer protections than medical records
