Garmin Ltd. (NYSE: GRMN) is a Swiss-domiciled, publicly traded maker of GPS wearables, smartwatches, and the companion Garmin Connect app/service. Garmin's own privacy policies describe broad activity, health, and wellness data collection (heart rate, sleep, menstrual cycle information, hydration, location) that uploads to a Garmin Connect account set to "Private" by default, alongside routine device-sync telemetry (IP address, geographic location, network type, battery level) and several third-party analytics/crash-reporting SDKs (Google Analytics, Firebase Crashlytics, Amplitude, Flurry, Azure Application Insights). Garmin's CCPA notice states it does not sell personal information but discloses sharing several data categories with third-party advertising networks for cross-context behavioral advertising. Ownership is fully traceable through Garmin's own SEC filings (Garmin Ltd., domiciled in Switzerland, NYSE-listed under GRMN since December 2021). In July 2020, Garmin disclosed via SEC filing that it was the victim of a ransomware/cyber attack that encrypted internal systems and caused a multi-day service outage; Garmin stated it had no indication that customer data was accessed, lost, or stolen, and no FTC or state-AG enforcement order was found via a primary source during this review.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
9 ON FILE
COLLECTION
Garmin Connect's privacy policy states that users can upload or manually add activity, health, and wellness data — including heart rate, sleep, golf stats, hydration, and menstrual cycle information — to their Garmin account, and that activity data is set to "Private" by default unless the user changes their privacy settings.
Garmin's global Privacy Policy states that when a device syncs, Garmin logs transmission-related data including the IP address used, sync time and date, crash/diagnostic logs, the geographic location of the device, device and network information, and device battery level.
Garmin's own Form 10-K states that Garmin's shares have traded on the New York Stock Exchange under the symbol "GRMN" since December 7, 2021 (previously on Nasdaq), and separately identifies Switzerland as Garmin Ltd.'s country of domicile, giving a single, fully traceable public-company ownership chain.
Garmin's global Privacy Policy states that Garmin may disclose personal data to comply with legal and regulatory obligations such as a valid subpoena or court order, to investigate fraud, or in connection with a reorganization, merger, or sale of business assets.
Garmin's CCPA Privacy Notice states that Garmin does not sell personal information, but discloses that it shares certain categories of personal information with third-party advertising networks for the purpose of facilitating online cross-context behavioral advertising.
Garmin's own press release, filed as an exhibit to a Form 8-K with the SEC on July 27, 2020, states that Garmin was the victim of a cyber attack that encrypted some of its systems on July 23, 2020, interrupting website functions, customer support, and customer-facing applications, and states there was no indication that customer data, including Garmin Pay payment information, was accessed, lost, or stolen.
Garmin's global Privacy Policy discloses use of multiple third-party analytics and crash-reporting services across its products and apps, including Google Analytics, Azure Application Insights, Microsoft App Center/Firebase Crashlytics, Flurry, and Amplitude, stated to help Garmin "better understand usage to improve user experience."