Only one (of the six reviewed) that I'd call acceptable -
> Euki is the only app Mozilla recommends without reservations. "Euki is special," Wodinsky* says.
> Unlike the other apps on this list, Mozilla says Euki keeps all your health information stored on your device, without even sending it to the company's servers.
> You don't even need to make an account, so you can stay completely anonymous. Euki also offers a "decoy" feature that shows fake, harmless information if someone gets your phone and tries to snoop.
*Shoshana Wodinsky, a privacy research analyst who tested 6 period tracker on behalf of the Mozilla Foundation
Although the article doesn't accuse us of doing anything improper, we weren't contacted for comment, so I'd like to clarify our role.
We are customer data infrastructure, not a data broker. We do not buy, sell or monetize the customer data that passes through our systems.
Our role is analogous to infrastructure: customers choose what data to send, and RudderStack routes that data to the destinations they configure (analytics tools, data warehouses, marketing platforms, etc.). The customer owns the data and decides where it goes; RudderStack does not repurpose it for its own business.
Infrastructure providers like us should be held to high standards for security and privacy, but we should not be confused with companies that collect or monetize end-user data.
Are analytics tools, data warehouses, and marketing platforms the only types of destinations you support? Because if that's the case then your system appears to only be useful for privacy invasions.
The article did not accuse you of anything and went so far as to say “There's nothing unlawful going on, and there's no reason to think RudderStack (or any company mentioned in this story) is doing something nefarious.”
I’m struggling to understand why you would feel the need to comment. Or why you even think the BBC would have contacted you. This is one of those moments in PR where a response with no reason makes reasonable people wonder why.
I use Macrofactor (macro tracking app for lifters with good privacy/UI) as a weight/period tracker, and occasional macro tracker. I don't think anybody is going to go to the effort to hack their databases to find the 100 women tracking our periods on it.
The one downside is that they do days since last period as days since the end of your last period, not days since the start, unlike literally every woman and gynecologist ever.
MacroFactor is very rare in the modern software world, probably because it was created by fitness science junkies rather than VCs or engineers. Greg was extremely adamant from the start that they're charging money, take it or leave it, but selling the product itself is all they're ever going to sell. No monetizing user data. No dark patterns to drive engagement and keep you in the app. All they're trying to drive is better lifting and better eating because that's honest to god Greg and Lindsay Nuckols passions in life, not getting rich. Classic lifestyle business that'll never eat the world, but it'll pay the rent in North Carolina for two 40 year-olds with no kids.
Whenever this issue comes up I feel the need to relay a story about a meeting with a databroker in 1998 who was tracking menstrual cycles using purchasing records of a wide variety of consumer goods. They will track you to optimize their manipulative, targeted advertising whether you have an invasive app or not.
As others in the thread have pointed out, Euki is a wonderful application and having interacted with members of their team, I know they are committed to maintaining their liberating privacy stances.
Why not something p2p and encrypted? https://peerloomllc.com/pearpetal/ No servers, no problem. You fear losing your device? I'm sure you have more than one, any additional one you have is a fully functional backup.
Or better yet. Why trust this one (even though the source is on github)? You can just ask your AI agent to build you your custom one on the basis of this technology.
This is the second time [1] that analytics in period apps have been problematic, and also follows the recent hack of MixPanel [2] exposing OpenAI usage data. Seems like 3rd-party analytics are becoming a new frontier for security issues.
Period trackers are the perfect usecase for homomorphic encryption, where the system can operate on the data without knowing what the data says. It's slow and has a lot of overhead, but it's an active area of research. That way, the platform doesn't know what you're telling it. You have to trust the platform to have implemented it properly, and it's rather nerdy a detail, so it's no surprise there isn't one yet.
I'm male, and clearly don't know enough about this--are there any benefits for the user that a period tracking app can provide by reaching out to the cloud? I guess backing up your data is an obvious one.
I thought entering the information is like 90% of the tracking, everything else is mostly calculation/averaging and none of it needs to live on a server. The Euki app seems like my idea of what it would always be.
I would never trust any private health data to an app. I don't care what promises or claims they make. The technology is fundamentally untrustable, and even if a vendor is doing the right thing today, they (or any intermediary) could change tomorrow.
I always use open source apps, but at the same time I wonder how can my we all benefit from each other data respectfully of privacy, health or otherwise
And anyway the data that the other 50 apps are collecting on most people phones can be used to infer most of this. Your locations, what you bought recently, what you searched online, which sites have you been, what you asked your chat bot, what you liked or viewed in social media...
These articles are always so vague, never explaining the difference between proprietary and free software, and even treating sending data to company servers as some kind of acceptable default, only raising privacy alarms when the data is also sent (directly) to some 3rd party server. As if that makes any difference once the company has your data - they can sell it to whoever themselves.
25 comments
[ 3.0 ms ] story [ 44.2 ms ] thread> Euki is the only app Mozilla recommends without reservations. "Euki is special," Wodinsky* says.
> Unlike the other apps on this list, Mozilla says Euki keeps all your health information stored on your device, without even sending it to the company's servers.
> You don't even need to make an account, so you can stay completely anonymous. Euki also offers a "decoy" feature that shows fake, harmless information if someone gets your phone and tries to snoop.
*Shoshana Wodinsky, a privacy research analyst who tested 6 period tracker on behalf of the Mozilla Foundation
https://f-droid.org/packages/com.drip/
It's not mentioned in the article.
Like Euki it's local-only. I don't know how they compare as far as features but it's cool that there are two good apps out there.
Although the article doesn't accuse us of doing anything improper, we weren't contacted for comment, so I'd like to clarify our role.
We are customer data infrastructure, not a data broker. We do not buy, sell or monetize the customer data that passes through our systems.
Our role is analogous to infrastructure: customers choose what data to send, and RudderStack routes that data to the destinations they configure (analytics tools, data warehouses, marketing platforms, etc.). The customer owns the data and decides where it goes; RudderStack does not repurpose it for its own business.
Infrastructure providers like us should be held to high standards for security and privacy, but we should not be confused with companies that collect or monetize end-user data.
I’m struggling to understand why you would feel the need to comment. Or why you even think the BBC would have contacted you. This is one of those moments in PR where a response with no reason makes reasonable people wonder why.
The one downside is that they do days since last period as days since the end of your last period, not days since the start, unlike literally every woman and gynecologist ever.
>Drip, Euki, and Apple Health
The technology it is built on is extremely cool. http://pears.com/
Or better yet. Why trust this one (even though the source is on github)? You can just ask your AI agent to build you your custom one on the basis of this technology.
[1] https://www.thebureauinvestigates.com/stories/2025-09-03/met...
[2] https://openai.com/index/mixpanel-incident/
I thought entering the information is like 90% of the tracking, everything else is mostly calculation/averaging and none of it needs to live on a server. The Euki app seems like my idea of what it would always be.
Why are so many women saying their periods are suddenly late or irregular? Experts explain https://dailynews.co.za/lifestyle/health/2026-07-14-why-are-...
Your menstrual cycle may affect how well vaccines work https://www.newscientist.com/article/2532245-your-menstrual-...
COVID-19 vaccine 'disrupted the periods of thousands of women' - but changes 'short-lived' https://news.sky.com/story/covid-19-vaccine-disrupted-the-pe...
I always use open source apps, but at the same time I wonder how can my we all benefit from each other data respectfully of privacy, health or otherwise
And anyway the data that the other 50 apps are collecting on most people phones can be used to infer most of this. Your locations, what you bought recently, what you searched online, which sites have you been, what you asked your chat bot, what you liked or viewed in social media...
In contrast with the (single) mention of open-source on Mozilla's website that the BBC article cites: https://www.mozillafoundation.org/en/nothing-personal/period...
These articles are always so vague, never explaining the difference between proprietary and free software, and even treating sending data to company servers as some kind of acceptable default, only raising privacy alarms when the data is also sent (directly) to some 3rd party server. As if that makes any difference once the company has your data - they can sell it to whoever themselves.