According to a security researcher[1], a 0-day in Analyticsd allowed any installed app to access the users health data.

[1] https://habr.com/en/post/579714/

EDIT: Found the link to the previous HN discussion about this: https://news.ycombinator.com/item?id=28637276

the health and PII data making its way to log data may give Apple legal cover to ingest the data "accidentally", also.

Recall that Google got to claim their street view cars wardriving was unintentional, and just paid $13M to make it go away, after using the data for about a decade [1]

https://www.cnn.com/2019/07/22/tech/google-street-view-priva...

When there is an indication, then it's already too late.

The trust you have in the system is not the trust I have.

Well yeah, but without observable facts, this is just wild guesses or paranoia. Considering the regular news about weaknesses in anything from Safari to iMessages, I have a really hard time taking these claims seriously. The storage and processing of health data is documented, and they do not leave the device or the Secure Enclave (unless you accept it, e.g. during a study).

> Well yeah, but without observable facts, this is just wild guesses or paranoia.

Not at all. What you are saying is that you don't want to lock the front-door because nobody has illegally entered your house yet. In contrast, I want to lock my front-door for obvious reasons. No paranoia. It's just a different mentality of dealing with security.