Consent for Wearables: What Your Watch Shares Beyond Your Steps
A fitness watch feels personal, almost medical, and its data is treated accordingly by the person wearing it. The sharing settings tell a looser story: workout routes posted by default, research programmes joined with one tap, and a chain of connected apps each holding a copy of your heart and sleep history.
Health data from wearables sits in a grey zone. It is sensitive in substance but often outside the strictest health privacy rules, which makes your own settings the main protection. This guide walks the three layers of sharing and the checks worth doing once a year.
The maker's settings: research, improvement, and public by default
Start in the wearable platform's privacy dashboard, not the watch. Look for toggles about sharing data to improve products, participating in research studies, and contributing anonymised data. Anonymised deserves scrutiny: detailed location routes and rare health patterns can be re identifying even without a name. Social features are the second trap. Public leaderboards, shareable workout maps, and automatic posts can expose where you run, when your house is empty, and where your children train. Set profiles to private, strip location from shared activities, and check that new features added in updates have not quietly reset these choices to the maker's preferred defaults.
Connected apps multiply copies of the same data
Every app you connect, training plans, sleep coaching, nutrition, meditation, receives some slice of your wearable data under its own policy, and keeps it under its own retention rules. The permission screen at connection time usually offers all or nothing, which is why the real control is the number of connections. Audit the connected apps list twice a year and revoke anything you stopped using; a forgotten app with live access is the wearable equivalent of an old key still fitting your front door. Read one policy properly, for your most connected app, to calibrate how much trust the rest deserve. If a service is sold or shuts down, ask what happens to its copy of your history.
Employer and insurer programmes change the consent terms
Discounted premiums and workplace wellness challenges come with data flows that individual consent screens describe poorly. A programme may receive activity summaries, participation data, or in some schemes much more, and declining can have social or financial costs that make the choice less than free. Before joining, find out in writing what data leaves your account, who sees individual level data versus aggregates, and what happens to your information when you leave the job or the scheme ends. If the answers are vague, that vagueness is itself an answer. Your watch will keep working perfectly well outside the programme, and your data stays under your settings instead.
Leaving a platform: export first, then delete
Switching watches feels like a hardware decision, but it strands years of health history in the old account. Export a full copy before you cancel anything, since some platforms limit exports after account closure. Then delete the data in the old platform rather than merely abandoning the account, revoke connected apps there too, and factory reset the old device before selling or recycling it. Keep the export somewhere private; health histories are useful for spotting your own long term patterns and occasionally for a clinician. The ten minutes this takes is the difference between moving platforms and quietly donating your history to one.
Related reading
These earlier guides cover connected questions in more depth: What Consent Enforcement Cases Teach About Dark Patterns, Consent on Public WiFi Portals: The Login Page That Collects More Than It Connects, and Consent in Newsletter Popups: Timing, Exit Intent, and the Decline Button Problem.
Frequently asked questions
Is wearable data protected like medical records?
Often not. Data you generate as a consumer frequently falls outside medical privacy law, so it is governed by the maker's policy and general consumer and privacy rules. That is why your own sharing settings matter so much.
Can my employer see my watch data through a wellness programme?
Programmes vary. Many show employers only aggregate or participation data, but terms differ and change. Ask for the data flow in writing before joining, including what happens when you leave.
Should I turn off research sharing on my wearable?
That is a values choice, not a technical one. Research sharing can do real good, but make it a deliberate choice with the data types visible, rather than a default you never noticed. You can usually withdraw later.
What is the riskiest wearable sharing setting?
Public workout routes with location are the most immediately risky, because they reveal home addresses and routines. Set activities to private and check map sharing before anything else.