I recently published an article showing that the Omron Connect app uploads a user’s entire Apple Health history in the categories it got technical read access — including data from non-Omron devices — to Omron’s cloud without clear, informed consent under GDPR.
Depending on the user’s Apple Health contents, this can include years of historical data.
Less than 4 days after publication, their Privacy Policy silently changed in the App from October 2024 (2.16) to a new (2.17) version dated May 2025. The update contains only minor changes — but notably adds vague legal wording about 3rd-parties, like Apple Health.
The timing suggests the change may have been a reaction to exposure, in my oppinion
aranypucek•3h ago
Depending on the user’s Apple Health contents, this can include years of historical data.
Less than 4 days after publication, their Privacy Policy silently changed in the App from October 2024 (2.16) to a new (2.17) version dated May 2025. The update contains only minor changes — but notably adds vague legal wording about 3rd-parties, like Apple Health.
The timing suggests the change may have been a reaction to exposure, in my oppinion