That Little Band on Your Wrist Knows More About You Than Your Doctor Does

You bought a smartwatch to hit 10,000 steps and maybe catch your heart rate during a run. What you probably didn't sign up for was handing over a continuous, real-time stream of deeply personal biological data to a corporation whose privacy policy runs longer than most novels. Yet here we are.

Wearables have exploded in the US market — Fitbit, Apple Watch, Garmin, Samsung Galaxy Watch, and a dozen other brands are now strapped to millions of American wrists. They're marketed as wellness companions, fitness coaches, and health monitors. And sure, they do all that. But underneath the cheerful step-count animations and sleep score summaries, there's an aggressive data collection engine running 24 hours a day, seven days a week.

Let's actually talk about what's being collected — and what's being done with it.

It's Not Just Steps and Calories

The obvious stuff — step counts, distance traveled, calories burned — feels harmless enough. It's the deeper layer that gets interesting, and not in a fun way.

Heart rate variability (HRV) is a big one. Your device isn't just checking whether your heart is beating. It's measuring the tiny fluctuations between each beat, which can reveal stress levels, recovery status, and even early indicators of certain health conditions. This is genuinely medically useful data. It's also extraordinarily sensitive information that paints a detailed picture of your physical and emotional state throughout the day.

Sleep data is another category people tend to underestimate. Modern wearables track when you fall asleep, how long you spend in each sleep stage, whether you're restless, and how your heart rate behaves overnight. Aggregated over months or years, this creates a longitudinal health profile that's arguably more revealing than a single doctor's visit.

Location history is where things get particularly uncomfortable. Most wearables sync to your phone and pull GPS data during outdoor workouts — but many also log location passively throughout the day. That means your device knows where you work, where you worship, where you seek medical care, and where you spend your nights.

Blood oxygen levels, skin temperature, menstrual cycle tracking, stress scores — depending on your device, some or all of these are being recorded continuously. The picture being assembled isn't just a fitness snapshot. It's a biological biography.

Who Actually Owns This Data?

Here's where US consumers tend to get tripped up. The assumption is that health data is protected — and some of it is, under HIPAA. But HIPAA applies to healthcare providers and insurers, not to consumer tech companies. Fitbit, Apple, Garmin, and their peers are not bound by HIPAA in the way your doctor is.

What governs how they handle your data? Their own privacy policies — which you agreed to when you set up the app, almost certainly without reading.

Fitbit's privacy policy (now under Google's umbrella, which should give you pause on its own) states that your data may be used to improve their products and services, which is vague enough to cover a lot of ground. Google has been explicit that Fitbit health data won't be used for targeted advertising — but policies change, companies get acquired, and "won't" is not the same as "can't."

Apple has positioned itself as the privacy-forward option, and to its credit, Health app data is encrypted and not used for advertising. But third-party apps connected to Apple Health operate under their own terms, and that's a gap worth paying attention to.

Garmin, popular with serious athletes, has had its own issues — including a ransomware attack in 2020 that temporarily took down its services and raised questions about data security infrastructure.

The bottom line: your data is valuable. Companies know it. The business models around wellness data — whether through data licensing, partnerships with insurers, or future monetization strategies — are still evolving, and not always in your favor.

What Those Permission Requests Are Actually Unlocking

When you first set up a wearable app, you're typically asked to grant a handful of permissions. Here's what they actually mean in plain English:

• Location (Always On): The app can track where you are at all times, even when you're not actively using it. For GPS workout tracking, "While Using" is sufficient.
• Health & Fitness Data Access: This opens a pipeline to your phone's health database, potentially sharing data across multiple connected apps.
• Contacts: Often requested for features like responding to texts from your wrist. Not necessary for health tracking.
• Background App Refresh: Allows the app to sync data continuously in the background, which also means more frequent data uploads to company servers.
• Notifications: Mostly benign for functionality, but also keeps the app top of mind and encourages more engagement.

The rule of thumb: grant only what's necessary for the features you actually use. You don't need location always-on if you only track indoor workouts.

Practical Steps to Lock Things Down

You don't have to ditch the wearable to reclaim some privacy. A few targeted adjustments go a long way.

On iPhone: Go to Settings → Privacy & Security → Health. Review which apps have access to your Health data and revoke permissions for anything that doesn't need it. Do the same under Location Services — flip anything set to "Always" down to "While Using" or "Never" where appropriate.

On Android: Check app permissions under Settings → Apps → [App Name] → Permissions. Pay special attention to location and body sensors.

In the wearable app itself: Most major platforms have a privacy or data settings section. Look for options to limit data sharing with third parties, opt out of research programs (these are often opt-in by default — sneaky), and review what's being synced to the cloud.

Consider a local-first approach: Some wearables, particularly from Garmin and certain Fitbit models, allow you to store data locally and sync selectively. This isn't always convenient, but it limits the continuous data stream.

Read the data export: Both Apple and Google let you download your health data. Do it once. Seeing exactly what's been collected — years of heart rate readings, sleep logs, location pings — tends to clarify why these settings matter.

Is the Trade-Off Worth It?

This isn't a screed against wearables. The technology is genuinely impressive, and for people managing chronic conditions, tracking fitness goals, or monitoring cardiac health, the benefits are real and meaningful.

But informed consent requires actually being informed. Most people have no idea their sleep patterns are being stored on a corporate server, that their stress scores are being processed by algorithms, or that a policy update could change how that data is used tomorrow.

The wearable industry has done a masterful job framing data collection as a feature — personalized insights! Trend analysis! Health scores! — rather than as the value exchange it actually is. You're not just a customer. You're also a data source.

Knowing that doesn't mean you have to stop wearing the device. It means you can make a smarter choice about which device you wear, which permissions you grant, and which data you're comfortable contributing to someone else's business model.

Your wrist, your call. But at least now you know what's actually on the table.