Ovia (Ovia Fertility, Ovia Pregnancy, Ovia Parenting) is a reproductive-health and family-planning app suite published by Ovuline, Inc., doing business as "Ovia Health by Labcorp," following Labcorp's 2021 acquisition of Ovia Health. Its own Privacy Policy discloses a broad set of personal data categories, including race, gender identity, sexual orientation, and other legally protected classifications, plus employer/employee ID for members who receive the paid "Ovia+" tier through an employer or health plan; that Ovia+ tier includes data sharing with the sponsoring insurer, employer health plan, or employer under HIPAA when the user consents. The policy also states Ovia may sell or disclose deidentified data derived from patient information and may receive compensation for sharing deidentified or aggregate data, and that Ovia shared identifiers and inferred interests with ad networks until terminating its advertising business in June 2025. No FTC or other regulator enforcement action against Ovia/Ovuline was found in a search of the FTC's case library; the company's Ovia+ product states it holds a HITRUST Common Security Framework certification.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
8 ON FILE
COLLECTION
The Ovia Cycle & Pregnancy Tracker app's Apple App Store privacy label lists Health & Fitness, Financial Info, Location, Contact Info, and Identifier data as 'Data Linked to You' used for the developer's own Advertising or Marketing purpose, in addition to app functionality, analytics, and product-personalization purposes.
Ovia's Privacy Policy lists 'Legally protected classifications' as a standard personal-data category it collects, with examples including race, gender identity, age, ethnic group, nationality, sexual orientation, pregnancy status, disability, and medical condition; the same data-category table discloses that for Ovia+ members it also collects employer ID and employee ID to support the employer/health-plan-sponsored membership tier.
The Ovia Cycle & Pregnancy Tracker listing on the Apple App Store names the developer of record as 'Ovuline, Inc.' while branding the product 'Ovia Health by Labcorp' throughout its marketing description, corroborating the operating-entity-to-parent-brand chain disclosed in Labcorp's own 10-K.
Laboratory Corporation of America Holdings' (Labcorp) Form 10-K for fiscal year 2021, filed with the SEC, states that the company 'enhanced its digital capabilities through the acquisition of Ovia Health, a leading digital platform trusted by millions of individuals for family planning, pregnancy, and parenting support' -- mandatory-filing confirmation that Labcorp is Ovia Health's corporate parent.
Ovia's Privacy Policy states 'Ovia may receive compensation for sharing deidentified or aggregate data' and separately that Ovia 'may disclose or sell deidentified data derived from patient information' as defined by the CCPA. The same policy states that prior to 'terminat[ing] advertising in June 2025,' Ovia shared identifiers, internet/app activity information, and inferred purchase interests with ad sales platforms and advertising networks, and that Ovia+ members enrolled through an employer or employer health plan have their data shared with that insurer, employer health plan, employer, or its vendors 'in accordance with HIPAA and other privacy laws.'
Ovia's Privacy Policy states that Ovia protects personal data with security measures 'consistent with industry standards,' that its Ovia+ product 'has achieved certification to the HITRUST Common Security Framework,' and that its principal database is hosted by Amazon Web Services. No FTC enforcement action against Ovia, Ovuline, or Labcorp was found in a search of the FTC's legal-library case browser.
The App Store privacy label's 'Data Not Linked to You' section shows Diagnostics data used for Analytics and App Functionality purposes; the label does not include a separate 'Data Used to Track You' section (the category Apple uses for cross-app/cross-site ad tracking), consistent with Ovia's policy claim of no longer running an advertising business.
Ovia's Privacy Policy states that, in addition to data collected directly from users and synced devices, Ovia automatically collects information from a user's device and 'use[s] cookies, tags, pixels and other tracking technologies to collect information about your interaction with content and the Services generally.'