Glow Ovulation Tracker

Our Findings

• Glow Ovulation Tracker presents significant security and privacy concerns despite being classified as a wellness product. The product exhibits a pattern of inadequate data protection practices spanning multiple years. Data minimization is severely compromised by excessive collection of sensitive health, personal, and demographic data beyond what core ovulation tracking requires. Privacy policy clarity is undermined by vague third-party sharing language that directly contradicts public app store claims ('no data shared with third parties'), which Mozilla Foundation flagged as misleading. User control mechanisms exist but require manual support contact rather than built-in tools, and were mandated by regulatory settlement rather than implemented proactively. Third-party sharing is broad and open-ended, with numerous unidentified advertising companies, business partners, and 'professional advisors' receiving user data without specific naming. Security infrastructure lacks documented encryption standards, MFA, or formal certifications, and recent API vulnerabilities demonstrate inadequate security practices. Most critically, track record reveals a pattern: 2020 California AG settlement for security failures and unauthorized access, 2016 Consumer Reports privacy loophole, and 2024 API exposure affecting 25 million users. This negative track record (-2 points) significantly impacts the overall score. The product does not meet threshold requirements for 'Good' rating on the SAFE framework.

Strengths

• Data export and deletion request processes available via support forms and email (support.glowing.com, privacy@glowing.com) per privacy policy documentation
• Multilingual support in 33 languages (English + 32 others including Spanish, Arabic, Russian, Chinese, French, Korean, Portuguese, Vietnamese) per Apple App Store listing, facilitating broader accessibility
• GDPR and UK GDPR compliance awareness demonstrated by Data Protection Officer contact (GlowDataProtectionOfficer@glowing.com) and Global Privacy Control support mentioned in privacy policy
• Medical advisory board of 20+ specialists across reproductive health, pediatrics, neonatology, and endometriosis per About page
• Free tier provides basic ovulation tracking without premium paywall, reducing economic barriers to core functionality
• Specific partner integrations named for health data (Apple HealthKit, Samsung Health, Google Fit, MyFitnessApp) and payment processing (Stripe) per privacy policy
• Explicit medical disclaimers in Terms of Service stating app is not medical advice and intended as aid for conception, not contraception

Weaknesses

• CRITICAL: Major unresolved track record of security failures - California AG settlement (2020) for failing to safeguard health data and allowing unauthorized access ($250K penalty); Consumer Reports privacy loophole (2016); 2024 TechCrunch exposure of 25 million users via IDOR vulnerability in public API (names, ages, locations, IDs, photos) per security_evidence_track_record
• CRITICAL: Direct contradiction between app store data safety claims and privacy policy - Google Play claims 'No data shared with third parties' but actual privacy policy describes extensive sharing with third-party advertisers, business partners, and professional advisors per Mozilla Foundation review cited in security_evidence_app_store_permissions
• Excessive data collection beyond core functionality - collects ethnicity, sexual orientation, relationship status, insurance type, medication data, sleep data, mood data, children's information, spouse/partner contact details, healthcare provider contacts, and can import data from external health apps per privacy_policy_details
• Vague third-party sharing language - uses undefined terms like 'professional advisors,' 'affiliates,' 'marketing affiliates,' 'our partners,' and 'other sources such as social media accounts' without naming specific entities per privacy_policy_details
• No documented encryption standards - privacy policy references only 'adequate security' without specifying encryption protocols for data in transit or at rest; no mention of end-to-end encryption per security_evidence_privacy_policy_details
• Lack of security certifications - no SOC 2, HIPAA, ISO 27001, or formal GDPR certification documented; only registration (not approval) as FDA Listed Proceptive Device per security_evidence_security_certifications
• No documented MFA or modern security controls - privacy policy does not mention multi-factor authentication or other authentication hardening measures per security_evidence_privacy_policy_details
• Offline Data Protection is opt-in rather than default - sensitive health data protection requires users to manually enable feature in settings rather than providing baseline encryption per privacy_policy_details
• Broad law enforcement sharing clause - privacy policy allows sharing with 'Law enforcement, government authorities, and private parties as we believe in good faith to be necessary or appropriate' without requiring legal process per privacy_policy_details
• California AG settlement injunction (2020) was required to mandate affirmative consent before sharing/disclosing personal medical information - indicates privacy safeguards were not built in proactively but imposed by regulatory action per security_evidence_track_record

What We Couldn't Find

• No documentation of specific encryption protocols (AES-256, TLS versions, etc.) for data in transit or at rest - expected for health data app handling sensitive reproductive health information - status: missing_expected No MFA implementation documented in privacy policy or support materials - expected for app storing sensitive personal health data and enabling account takeover via password reset vulnerability per 2020 CA AG settlement - status: missing_expected No SOC 2 Type II audit report or certification status documented - standard expectation for health data platforms - status: missing_expected No HIPAA Business Associate Agreement template or documentation despite handling health information - though company notes HIPAA does not apply to consumer period tracking apps - status: missing_expected (but may be N/A depending on interpretation) No ISO 27001 or ISO 27002 implementation documentation - standard for information security management - status: missing_expected No formal GDPR compliance certification despite mentioning GDPR awareness and Data Protection Officer - expected documentation of compliance mechanisms - status: missing_expected No incident response policy or disclosure process publicly documented - expected after 2024 API vulnerability and prior breaches - status: missing_expected No security audit or penetration testing results publicly available - standard practice following 2024 API exposure affecting 25 million users - status: missing_expected No specific identification of 'third party advertisers,' 'professional advisors,' 'affiliates,' or 'marketing affiliates' - vague language suggests undisclosed data sharing arrangements - status: missing_expected No documentation of how app handles data for users with irregular cycles, PCOS, or other conditions affecting ovulation prediction - expected given medical advisory board and mention of endometriosis specialist - status: missing_expected (but may be beyond scope of Security dimension) No formal data breach notification policy or timeline documented in accessible location - expected after recent API exposure - status: missing_expected No security status page or transparency report regarding past incidents and remediation - standard practice post-settlement - status: missing_expected

Our Findings

• Glow Ovulation Tracker is classified as a WELLNESS product making tracking and aid-to-conception claims (not clinical diagnostic claims). Regulatory_status is N/A because the product is positioned as a wellness tracking app, not a clinical medical device, despite FDA registration. Points are redistributed across the remaining four sub-criteria. CLINICAL VALIDATION is weak (2/8): only one peer-reviewed study exists, but it validates menstrual cycle length, not ovulation prediction accuracy. No prospective validation studies of the core predictive algorithm were found. MEDICAL PARTNERSHIPS are partial (3/6): the company has named medical advisors and one UCSF research collaboration, but these are advisory/observational partnerships rather than substantive clinical validation programs led by academic institutions. INDEPENDENT REVIEWS are mixed-to-negative (2/4): while overall ratings appear positive, specific user reports contradict accuracy claims, with users reporting predictions that do not match ovulation test results. Mozilla Foundation issued a 'Privacy Not Included' warning. TRANSPARENCY ON LIMITATIONS is strong (3/3): clear, prominent disclaimers about what the app cannot do and medical advice disclaimers are present. Overall, Glow demonstrates transparency about its limitations but lacks robust clinical validation evidence for its core ovulation prediction claims. The gap between marketing claims ('one of the most accurate on the market') and actual user reports of inaccuracy is concerning.

Strengths

• Strong transparency on limitations: Terms of Service clearly states 'GLOW IS NOT A PROVIDER OF MEDICAL ADVICE' and explicitly disclaims accuracy guarantees (https://glowing.com/terms-of-service)
• Explicit contraception warning: App clearly states 'not to be used for contraception,' reducing misuse risk (Terms of Service, App Store listings)
• Named medical advisors: 20+ medical specialists listed on About page including reproductive endocrinologists, maternal-fetal medicine specialists, and endometriosis surgeon (https://glowing.com/about)
• One peer-reviewed research publication using app data: COVID-19 vaccine/menstrual cycle study published in Fertility and Sterility (2023) with UCSF co-authors
• Some positive independent user reviews citing accuracy: 'pretty darn accurate' compared to 4 other apps (Ellie C, Google Play, October 2022)

Weaknesses

• No prospective validation studies of core ovulation prediction claims: The single peer-reviewed study (Hariton et al., 2023) analyzes cycle length, not prediction accuracy. No independent RCTs or validation studies found.
• Contradictory marketing vs. disclaimers: Website claims 'one of the most accurate on the market' while Terms simultaneously disclaim accuracy guarantees—this messaging inconsistency undermines credibility
• Multiple user reports of inaccuracy: 'I have taken ovulation tests and it says I'm ovulating on days the app says that I'm not' (Cris Mendoza, 2020); 'way off now' (Heather Squires, January 2026)
• Weak medical partnerships for core validation: 20+ advisors are listed but appear to be advisory board roles, not institutions formally validating the app's accuracy. Only one research collaboration (UCSF observational study) found
• Mozilla Foundation 'Privacy Not Included' warning: Independent evaluator flagged misleading data safety claims on app store (https://www.mozillafoundation.org/en/privacynotincluded/glow-eve-by-glow/)
• Limited scope of available research: The one published study excluded 97.6% of eligible users (218,977 screened, 5,314 analyzed), limiting generalizability
• No documentation of algorithm validation: No published studies describing how the app's machine learning algorithm was developed, tested, or validated for diverse populations

What We Couldn't Find

• No prospective validation studies: Expected to find peer-reviewed RCTs or validation studies testing app's ovulation prediction accuracy against clinical gold standard (LH surge, ultrasound). Not found in clinical_studies_page (not provided), research_papers (not provided), or regulatory_info (not provided). No algorithm documentation: Expected to find published description of machine learning algorithm, training data, validation methodology, and performance metrics. Not found in any available sources. No accuracy metrics published: Expected to find sensitivity/specificity, positive predictive value, or other accuracy statistics for ovulation prediction. Not found. No diverse population studies: Expected to find validation studies in different demographic groups (age ranges, BMI categories, cycle patterns, hormonal contraceptive users, PCOS, endometriosis). Only one study found (COVID-19 study) with limited demographic detail. No clinical partnership details: Expected to find formal research collaboration agreements with hospitals or academic medical centers for algorithm validation. Only advisory relationships documented. No institutional review board approval documentation: Expected to find evidence of IRB approval for any clinical studies. Only published study (Hariton et al., 2023) found. No user accuracy validation studies: Expected to find published or documented studies comparing app predictions to gold standard methods (LH tests, ultrasound, BBT analysis) in real users. Not found.

Our Findings

• Glow Ovulation Tracker demonstrates moderate Foundation strength. Leadership experience is strong in tech entrepreneurship but not women's health specifically (Max Levchin: PayPal/Affirm background). Mission and vision are explicit, actionable, and well-articulated around data-driven women's health solutions. Advisory board is substantive with 20+ named medical experts spanning reproductive endocrinology, OB/GYN, neonatology, and clinical specialties—a clear strength. However, thought leadership is limited to one peer-reviewed study collaboration (COVID-19/menstrual cycles, 2023) with no documented public speaking, op-eds, or policy engagement from founders on women's health issues. Marketing alignment has significant concerns: despite user-empowerment framing, the company's well-documented 2020 California AG settlement for 'serious privacy and security failures' and Mozilla's 'Privacy Not Included' warning (citing false app store claims about data sharing) indicate substantial gaps between marketing narrative and actual practices. The company has recovered partially with injunctive requirements to implement privacy/security design, but the breach of trust fundamentally undermines marketing alignment with values. Overall, Foundation is credible but has gaps in clinical thought leadership and material tensions between marketing claims and documented security/privacy issues.

Strengths

• Strong, accomplished tech entrepreneur leadership: Max Levchin (PayPal, Slide, Affirm co-founder) provides credibility in scaling health tech; demonstrates serious capital and expertise (per About page)
• Explicit, actionable mission centered on data science for women's health: 'empower women with information' and 'enable people to manage their health in a whole new way' is specific and coherent (per About page)
• Substantive advisory board with 20+ named medical experts: includes reproductive endocrinologists (Dr. Chenette), OB/GYN/MFM (Dr. Chueh at Stanford), male fertility specialists (Dr. Eisenberg), neonatology (Dr. Palma), endometriosis surgery (Dr. Seckin), and nursing leadership (Siebold)—excellent clinical depth (per About page)
• Research collaboration with UCSF: published peer-reviewed study (Hariton et al., Fertility and Sterility, 2023) on COVID-19 vaccine effects on menstrual cycles demonstrates engagement with academic rigor (per About page and accuracy_evidence_research_papers_notes)

Weaknesses

• Leadership experience in women's health is indirect: founders' backgrounds are fintech/tech entrepreneurship; no documented clinical training or women's health specialization in Max Levchin or Mike Huang (per About page)
• Severely limited thought leadership presence: despite advisory board, no documented public speaking, published op-eds, policy engagement, or bylined thought leadership from founder/CEO on women's health equity or reproductive rights (per foundation_evidence_blog_thought_leadership: limited content evidence; missing_expected for public engagement)
• Marketing claims directly contradict documented data practices: App Store claims 'No data shared with third parties' explicitly contradict privacy policy's extensive third-party advertiser/partner sharing. Mozilla Foundation flagged as 'misleading and dishonest' (per security_evidence_app_store_permissions and security_evidence_language_specificity)
• Material trust violation from 2020 California AG settlement: company alleged to have 'failed to adequately safeguard health information,' 'allowed access without user consent,' and had security vulnerabilities in password reset function affecting women's reproductive data (per security_evidence_track_record). Settlement required $250K penalty and injunctive terms on privacy/security design.
• Tension between marketing narrative and documented accuracy concerns: website claims 'one of the most accurate on the market' and 'very accurate,' but app store reviews report significant accuracy mismatches with ovulation test strips, cycle prediction failures, and reduced accuracy in free tier (per accuracy_evidence_app_store_reviews and accuracy_evidence_website_claims)
• Limited diversity documentation: while app supports 33 languages, no explicit LGBTQ+ inclusivity statements, accessibility (WCAG/screen reader) documentation, or community health partnerships with underserved populations are detailed (per equity_evidence_lgbtq_cultural, equity_evidence_accessibility_wcag, equity_evidence_community_programs)

What We Couldn't Find

• No detailed public speaking, conference presentations, or thought leadership publications from founder/CEO on women's health equity, reproductive rights, or policy: only one peer-reviewed study collaboration documented (per foundation_evidence_blog_thought_leadership: 'specific thought leadership articles, author bylines, or detailed conference presentations from Glow leadership were not directly accessible') No documented LGBTQ+ inclusivity features or explicit community programs: app allows 'gender' field but no documentation of non-binary support, same-sex partner handling, or LGBTQ+-specific resources despite broad app scope (per equity_evidence_lgbtq_cultural: 'No explicit LGBTQ+ documentation') No accessibility (WCAG, screen reader) compliance statements or testing: despite broad app reach, no documentation of VoiceOver/TalkBack support or WCAG 2.1 compliance (per equity_evidence_accessibility_wcag: 'No specific WCAG compliance statements found') No community health partnerships or underserved population programs: only academic research partnership (UCSF) documented, no community health organization collaborations (per equity_evidence_community_programs: 'No evidence of formal partnerships with community health organizations') No product design specifics for diverse reproductive conditions: while endometriosis surgeon on advisory board, no documentation of how app handles PCOS, irregular cycles, hormonal contraceptive use, or other conditions (per equity_evidence_product_design_diversity: 'No specific documentation of how the app handles irregular cycles, PCOS') Limited marketing materials review: specific ad campaigns, video content, social media engagement strategy not detailed in sources (per foundation_evidence_social_media: 'detailed content diversity analysis is not available from fetched sources') No thought leadership on data ethics or privacy protection in women's health: given 2020 settlement and ongoing privacy concerns, no documented public commitment to privacy-as-mission or leadership on data ethics in women's health (missing_expected)

Our Findings

• Glow demonstrates some accessibility features (33-language support) and economic accessibility through a free tier ($59.99/year premium). However, the Equity dimension reveals significant gaps. The free tier's usability may diminish without premium subscription based on app store reviews. There is no documented sliding scale pricing, insurance integration, or explicit low-income support. While Glow mentions a large global community (25M+ members), no formal partnerships with community health organizations or underserved population advocacy programs were found. Representation in marketing and testimonials appears limited and undocumented. Product design considerations for diverse bodies and reproductive conditions are mentioned (endometriosis advisor, 50+ symptoms) but lack explicit validation or testing evidence. Overall, Glow appears positioned as a consumer wellness tool with broad reach but without evidence of deliberate equity initiatives or explicit design accommodations for diverse users.

Strengths

• Multilingual support (33 languages per Apple App Store) enables accessibility across global populations including Spanish, Arabic, Chinese, Vietnamese, Korean
• Free basic tier allows non-paying users access to core features (period tracking, ovulation prediction, daily health logging) per glowing.com/glowpremium
• Affordable premium pricing at $59.99/year (~$5/month) is competitive compared to fertility specialist consultations mentioned on website
• Medical advisory team includes specialist (Dr. Seckin) focused on endometriosis, suggesting consideration for users with specific reproductive conditions
• App recognizes diverse reproductive goals with separate Eve by Glow product (2015) for users not trying to conceive per about page
• Privacy policy allows users to input demographic data (ethnicity, gender, relationship status), indicating data infrastructure for diversity tracking
• Global availability across iOS and Android with international reach (25M+ members worldwide per about page)

Weaknesses

• NO documented accessibility features (screen reader support, WCAG compliance, high contrast mode) despite broad language support per app store listings
• Support help center only available in English (US) despite app supporting 33 languages - significant accessibility gap per support.glowing.com/hc/en-us
• NO evidence of sliding scale pricing, Medicaid/insurance integration, or low-income financial assistance per pricing page glowing.com/glowpremium and support materials
• Diverse representation in marketing appears minimal - limited testimonials (Ellie C, D Padilla, Jess H) with no documented diversity in imagery or branding per website
• NO community health partnerships or underserved population outreach programs found despite '25M+ community members' claim per about page
• App store review (January 2026) suggests free tier functionality degradation without premium: 'I guess because I don't pay they decided to track incorrectly' - raises equity concerns about access quality
• No explicit LGBTQ+ inclusive language or resources found despite 33-language support and data collection of 'gender' per privacy policy and support center
• Product design for diverse bodies/cycles not validated - app store review (undated) reports 'predictions are completely off' and don't match ovulation test strips for some users
• No documented accessibility for users with disabilities, older devices, or older operating systems per app store listings
• Missing documentation on how app handles irregular cycles, PCOS, hormonal contraceptive use, or other conditions affecting diverse users despite Dr. Seckin endometriosis advisory board presence

What We Couldn't Find

• Screen reader compatibility (VoiceOver/TalkBack support) - expected for wellness app with health data; not documented in app store, privacy policy, or support center WCAG 2.1 Level A/AA compliance statement - expected for app collecting sensitive health data; not found in any official source Sliding scale or income-based pricing - expected for health equity; not mentioned on pricing page, FAQ, or support materials Medicaid/insurance integration or acceptance - expected for health app; not documented per pricing page review Student, low-income, or hardship discount programs - expected for consumer health product; not found in pricing page, FAQ, or support center Specific LGBTQ+ inclusivity resources or non-binary gender support documentation - expected given 33-language support and gender data collection; not found in app store listings, FAQ, or website Community health organization partnerships or underserved population outreach programs - expected for '25M+ member community'; only academic UCSF research partnership documented Validation studies showing product design works equally for diverse bodies, cycles, ages, or reproductive conditions - expected for health app; only one UCSF study found (analyzing COVID-19 vaccine effects on cycle length, not app accuracy validation) Documentation of how app handles irregular cycles, PCOS, anovulation, hormonal contraceptive users, or other conditions - expected given medical advisory team; not found in publicly available sources Diversity data on app user testimonials or marketing imagery (race, body size, age, disability representation) - expected for consumer health product; limited testimonials without demographic details per website Accessibility features for older devices or older OS versions - expected; app store listings don't specify minimum OS requirements that could exclude older phones Multi-language support for help center and customer support - expected given 33-language app; only English (US) available per support.glowing.com/hc/en-us