News for hackers. Stuff that matters.

Ask HN: E2E Encrypted Period Trackers?

One sentiment from the recent Roe v Wade decision is that women should be careful about their data as law enforcement could use it to determine if they had an abortion.

Period tracker apps are quite popular, and even a form of contraception [1]. They technically don't need to access the data (although they may wish to for analytics/monetisation), so it seems to me like a perfect candidate for E2E encryption. But I can't find any that advertise they use E2E encryption (just a vague "we encrypt your data" in their privacy statement).

Is anyone working on this?

[1]: https://www.naturalcycles.com

Disclaimer: I'm a man, and I don't live in the US. My wife and I are just concerned onlookers.

( 18 comments | 24 points | on HN )
Re:Ask HN: E2E Encrypted Period Trackers? by amluto on Friday June 24, 2022 @08:14PM (#31871127)
If Apple cared more about privacy, they could address this with a category of enforced local-only apps. A local-only app would not be able to access the network or interact with other apps. It’s data could be backed up and synced via iCloud but not by any other means.

Side channels aside, this would avoid data leaks.

Re:Ask HN: E2E Encrypted Period Trackers? by account-5 on Saturday June 25, 2022 @06:45AM (#31874165)
Except if Apple receives a warrant for the iCloud data surely?
Re:Ask HN: E2E Encrypted Period Trackers? by amluto on Saturday June 25, 2022 @08:25PM (#31879897)
There’s a choice between:

(a) Company that wants to make as much money as possible from the use of their app. They will use tracker SDKs, sell data directly, sell data through aggregators, etc. And they’ll cooperate with subpoenas (but probably try to charge for it). And they might even cooperate with Texans who want to sue people under their bizarre law.

(b) Apple, which makes money off hardware, iCloud services, and to a limited extent, advertising. They will cooperate with subpoenas, but they also have the legal resources to fight them. And, for something like their customers’ health data, they quite likely will fight.

With choice (a), law enforcement and anyone else who wants to pay gets the data. With choice (b), law enforcement might get the data. I know what I would choose.

Obviously I would prefer (c), the hypothetical version of Apple with stronger iCloud backup encryption.

Re:Ask HN: E2E Encrypted Period Trackers? by giaour on Friday June 24, 2022 @05:46PM (#31869828)
I would only look for E2E encryption in such an app if its data were synchronized across multiple devices. Otherwise, there should be no E2E communication from the app at all, encrypted or not. Cycle tracking should be able to work with local data.
Re:Ask HN: E2E Encrypted Period Trackers? by jacob019 on Friday June 24, 2022 @05:31PM (#31869602)
Why would such an app need to go online at all? Maybe you can find an open source option on f-droid.
Re:Ask HN: E2E Encrypted Period Trackers? by RunningDroid on Friday June 24, 2022 @06:59PM (#31870596)
Periodical ( https://f-droid.org/packages/de.arnowelzel.android.periodica... ) & drip. ( https://f-droid.org/packages/com.drip/ ) show up in a cursory search on F-Droid. drip appears to have more features, but has build issues : https://gitlab.com/fdroid/fdroiddata/-/issues/2157
Re:Ask HN: E2E Encrypted Period Trackers? by 0ccupied on Friday June 24, 2022 @05:42PM (#31869752)
The Cycle Tracking app built into iOS’s Health app is E2EE.
Re:Ask HN: E2E Encrypted Period Trackers? by krinn_silver on Friday June 24, 2022 @06:59PM (#31870597)
That's really helpful! I just checked on this and you need to enable 2FA as well:

"Health data can be stored in iCloud. End-to-end encryption for Health data requires iOS 12 or later and two-factor authentication. Otherwise, the user’s data is still encrypted in storage and transmission but isn’t encrypted end-to-end. After the user turns on two-factor authentication and updates to iOS 12 or later, the user’s health data is migrated to end-to-end encryption."

https://support.apple.com/en-gb/guide/security/sec88be9900f/...

Re:Ask HN: E2E Encrypted Period Trackers? by rosnd on Saturday June 25, 2022 @07:13AM (#31874297)
Apple makes it really hard to not enable 2fa, things like the Homepod won't work at all without 2fa.
Re:Ask HN: E2E Encrypted Period Trackers? by dexwiz on Friday June 24, 2022 @05:38PM (#31869689)
Period tracker apps are already shady, most sell data. Future mothers buy a ton of stuff, and it’s very valuable to know when to time ads for these people.
Re:Ask HN: E2E Encrypted Period Trackers? by nickphx on Friday June 24, 2022 @05:47PM (#31869841)
Why add to the noise of apps and add to the possible confusion when a simple paper calendar would work?
Re:Ask HN: E2E Encrypted Period Trackers? by booi on Friday June 24, 2022 @06:55PM (#31870557)

  * Handy push notification early reminders
  * paper calendars have no security/privacy
  * app would always be available, not just at home  
  * ability to mark start/stop wherever/whenever and not just when the paper is nearby
  * app can track trends, make suggestions and predictions
  * can make historical data available to medical professionals
need any more?
Re:Ask HN: E2E Encrypted Period Trackers? by eimrine on Saturday June 25, 2022 @02:49AM (#31873139)
Handy? What if you miss your period notification among dozens of other push notifications?

No security in paper notebook? So why does this topic exist? No privacy? Tell me name of that paper notebook who sells your data?

Avaible not from home only? How many looks at this kind of data is required daily?

Ability to mark whenever? Why if precision of calendar of periods anyway is limited to days?

Track trendns and make predictions? This is an EXACT goal of using tracker, no matter paper or digital.

Can make historical data available? This is a pure lie, you are going to change several devices and versions of OS w/o ability to import that history (for example) from Android 4 to Android 14. Paper can serve you since your the first period ever upto the last one.

Re:Ask HN: E2E Encrypted Period Trackers? by 2OEH8eoCRo0 on Friday June 24, 2022 @07:49PM (#31870971)
Re:Ask HN: E2E Encrypted Period Trackers? by rozenmd on Saturday June 25, 2022 @09:35AM (#31875189)
This might be of interest: https://bloodyhealth.gitlab.io/
Re:Ask HN: E2E Encrypted Period Trackers? by RedComet on Friday June 24, 2022 @05:49PM (#31869866)
Where do you live, might I ask?
Re:Ask HN: E2E Encrypted Period Trackers? by nikolqy on Friday June 24, 2022 @06:10PM (#31870103)
Thinking the people who support abortion are on your side is the issue. The people supporting abortion are the same people who make period tracker apps and the same people that run the companies that buy that data. Think about it.
Re:Ask HN: E2E Encrypted Period Trackers? by mturmon on Friday June 24, 2022 @07:40PM (#31870906)
Since in many polls, access to abortion is supported by > 50% of Americans, your statement is rather vacuous.