Insurance Curator How Wearables and Health Apps Track You—and Ways to Protect Health Data?
Your smartwatch knows when you’re stressed. Your sleep tracker logs every restless hour. Your health app has a map of your workouts, heart rate, and even menstrual cycle. But who else has access to that data—and what happens to it when you’re no longer around to manage it?
Wearables collect an extraordinary amount of intimate health information. From step counts to blood oxygen levels, these devices create a detailed digital portrait of your body. While convenient, this data is frequently shared, sold, or leaked without your explicit consent. And for estate planning, the question of who inherits or controls your health data after death is a growing legal gray area.
Understanding how wearables track you—and taking steps to protect that data—is critical for anyone serious about online privacy and estate planning. Below, we’ll dive deep into the mechanics, risks, and safeguards, and show you how to weave health data security into your legacy plan.
How Wearables and Health Apps Collect Your Data
The Sensors Inside Your Wrist
Modern wearables pack a surprising array of sensors. They don’t just count steps—they measure:
- Accelerometer and gyroscope – motion and orientation, used for sleep analysis and fall detection.
- Optical heart rate sensor – photoplethysmography (PPG) to track pulse.
- Electrocardiogram (ECG) – electrical activity of the heart.
- SpO2 sensor – blood oxygen saturation.
- Galvanic skin response (GSR) – sweat levels, often tied to stress.
- GPS – location and movement patterns.
- Microphone (in some devices) – audio for voice commands or noise detection.
Each data point is logged continuously. Even when you think the device is idle, it’s collecting background metrics like ambient light or skin temperature.
What Health Apps Do With That Data
The wearable itself is just the hardware. The companion app—whether Apple Health, Google Fit, Fitbit, or a third-party platform—aggregates, analyzes, and often shares your information.
Common data flows include:
- Cloud synchronization: Your data leaves the device and lands on company servers.
- Third-party integrations: Apps like MyFitnessPal, Strava, or Apple Health Kit share data with partners (sometimes without clear disclosure).
- Research and anonymized graphs: Many companies claim to use aggregated data for R&D, but “anonymized” data can frequently be re-identified.
- Advertising and insurance partnerships: Some wearables companies sell de-identified health trends to advertisers or offer data to insurers for risk assessment.
A 2023 study by The Markup found that several popular period-tracking apps shared menstrual health data with Facebook without explicit user consent. The same pattern repeats across fitness, sleep, and mental health apps.
Location Tracking Adds Another Layer
Wearables often combine health data with precise location history. Your run route, coffee shop visits, and nightly wanderings become part of your health profile. Geotagged health data can reveal sensitive patterns: clinic visits, gym attendance, or even your home address.
For estate planning, location + health data creates a permanent digital footprint that executors or heirs might need to manage—or that predators could misuse after your death.
The Risks: Why Health Data Privacy Matters
Identity Theft and Medical Fraud
Health data is more valuable on the black market than credit card numbers. Medical identity theft can take years to resolve. With a full health profile, criminals can file fraudulent insurance claims, obtain prescription drugs, or even receive treatment under your name.
Unlike financial fraud, medical fraud often goes undetected until you receive a bill for a procedure you never had—or until your health insurance is compromised.
Insurance and Employment Discrimination
Insurers and employers have a growing interest in wearable data. In some countries, life insurance companies already offer discounts in exchange for step counts. But the flip side: if your data reveals risk factors (poor sleep, irregular heart rate, frequent hospital visits), insurers could raise premiums or deny coverage.
In the U.S., the Genetic Information Nondiscrimination Act (GINA) protects genetic data, but most wearable health data is not covered. Some states have started to ban employer-requested wearable data, but federal protections are weak.
Digital Afterlife: Who Controls Your Health Data?
A little‑addressed risk: what happens to your health data after you die? Most wearable terms of service treat your data as a non‑transferable license. Heirs may not have the legal right to access or delete your fitness profiles, sleep logs, or location history.
If you have a smartwatch that records ECG readings or a continuous glucose monitor, that data could remain on company servers indefinitely—or be accessible only if you’ve pre‑authorized a digital executor.
This gap can cause problems for families trying to close accounts, manage digital assets, or even prove cause of death. A will that doesn’t address health data creates a legal black hole.
Related reading: Want to understand the broader landscape of data collection? See our Online Privacy 101 guide.
Ways to Protect Your Health Data
1. Audit App Permissions
Start with your smartphone. Go into Settings → Privacy → Health (or Fitness) and review which apps have access to your health data. Revoke permissions for any app that doesn’t absolutely need it.
- iOS: Health app → Sharing tab → Apps and Services.
- Android: Settings → Apps → Special app access → Health data.
Turn off background location and Bluetooth scanning for health apps unless essential.
2. Use Open‑Source or Privacy‑Focused Alternatives
Consider devices that prioritize local processing over cloud uploads. For example, the PineTime or AsteroidOS‑powered watches run without proprietary cloud sync. For sleep tracking, Sleep as Android offers encrypted local storage.
- Minimize apps that insist on account creation.
- Prefer apps that store data on‑device and use end‑to‑end encryption for backups.
3. Encrypt Your Wearable’s Cloud Sync
If you must use a cloud‑connected wearable, enable encryption. Many services like Apple Health offer end‑to‑end encryption (iCloud data is encrypted at rest, but not always during transit). Use a VPN on all devices and turn off automatic cloud backup for health data.
4. Disable Third‑Party Integrations
Fitbit, Garmin, and Apple Health often allow dozens of third‑party app connections. Go into your account settings and revoke integrations with services like Strava, MyFitnessPal, or any app you no longer use.
- Remove integrations for food diaries, meditation apps, or period trackers that might share data.
- Check for automatic sharing to social media—many fitness apps default to posting your runs or workouts publicly.
5. Use a Privacy Browser and Ad Blocker While Researching
When you research health conditions or medications online, that data can be tied to your health profile. Use a private browser with built‑in tracker blocking and a good ad blocker. Clear cookies regularly.
6. Consider a Digital Cleanup
Every month, review the apps on your phone and the devices connected to your accounts. For a deeper dive, read our steps on How to Reduce Your Digital Footprint.
Estate Planning and Your Digital Health Data
Build Health Data into Your Estate Plan
Traditional estate planning covers assets, property, and personal wishes. But digital health data is a new category of asset—and liability. Here’s how to include it:
- Designate a digital executor – Name someone you trust to handle online accounts, including health app logins, device passwords, and biometric data.
- Document account lists – Write down every wearable and health app you use, along with login credentials and instructions for deletion or transfer.
- Include HIPAA authorizations – Even if you have a living will, health data held by third‑party apps may not be protected. A specific HIPAA‑compliant authorization can give your executor access to electronic health records.
- Create a will provision for digital assets – Many states now allow you to leave digital assets (including health data) to an heir. Check your state’s laws.
Resources to Guide You
| Book | Price | Rating | Best For |
|---|---|---|---|
 |
$22.97 | 4.4 | Seniors needing a simple three‑in‑one guide |
 |
$24.97 | 4.5 | Comprehensive wealth management and estate planning |
 |
$27.89 | 4.7 | In‑depth legal reference from Nolo |
 |
$20.99 | 4.3 | Beginner‑friendly overview of estate planning |
 |
$11.63 | 4.6 | Organizing personal information for survivors |
Recommendation: Start with the I’m Dead, Now What? planner for a low‑cost way to document all your digital accounts, including wearable logins. Then upgrade to Nolo’s Guide for the legal fine print on digital asset clauses.
Beyond the Books: Practical Steps
- Check your state’s digital asset law – The Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA) governs who can access your online accounts after death. Some states allow executors full access; others require explicit permission.
- Set a privacy‑focused digital legacy – For health apps that don’t allow account transfer, write a letter of instruction requesting deletion. Keep a backup with your will.
- Talk to your family – Make sure your digital executor knows your wearable passcodes and where you store health data. A surprise locked‑out executor can’t protect your privacy.
Further reading: Adjust your Privacy Settings on Social Media to limit health‑related check‑ins and location tagging.
FAQ
Are wearables always tracking me?
Yes, most wearables collect some data even in standby mode. Step counting, heart rate background monitoring, and movement detection are typically always on. You can disable certain sensors in the device settings, but full tracking off often requires restarting the device.
Can health app data be used against me in court or insurance claims?
Potentially. Health app data has been used in legal cases (e.g., personal injury) and could be requested by insurers if you apply for coverage. Some life insurance policies now ask for wearable data access. It’s wise to consult an attorney before sharing.
Who owns my health data after I die?
It depends on the app’s terms of service and state law. Most apps claim ownership of aggregated data but allow account deletion by a verified family member—if they know the login. Without explicit instructions in your estate plan, heirs may face a long legal battle.
What’s the best way to document my digital health accounts?
Use a dedicated planner like I’m Dead, Now What? to record every service, device, and password. Store it securely (e.g., in a safe or with your attorney) and update it regularly.
How do I delete my health data permanently?
First, delete the app from your phone. Then log into the web portal (e.g., Fitbit account settings) and use the “Delete Account” option. Some companies, like Apple, let you delete health data via iCloud settings. Always check that cloud backups are also removed.
Do I need a VPN for my wearable?
A VPN on your phone doesn’t directly protect wearable sensor data, but it encrypts the internet traffic from the health app to its servers. For extra security, use a VPN on the phone paired with the wearable, and turn off Bluetooth when not in use.
Should I worry about location sharing in health apps?
Yes. Location data combined with health data can reveal sensitive patterns. In your health app settings, turn off “always” location access and set it to “while using” or “never.” Also, disable geotagging in photos taken by your wearable.