Premom is an ovulation, period, and fertility-tracking app made by Easy Healthcare Corporation, an Illinois-based, privately held company co-founded in 2013 by Sherry Liu and Li Zou (also behind the easy@Home test-kit brand). In May 2023 the FTC and DOJ charged Easy Healthcare with deceptively sharing Premom users' identifiable health data (menstrual cycle, pregnancy status, hormone results) with third parties including AppsFlyer, Google, and Chinese analytics firms Umeng and Jiguang via integrated SDKs, sharing non-resettable device identifiers, failing to adequately encrypt data sent to firms in China, and violating the Health Breach Notification Rule by not disclosing the unauthorized sharing; the resulting order imposed a $100,000 civil penalty plus $100,000 to three states, a permanent ban on sharing health data for advertising, and a 20-year independent compliance program. Premom's current Privacy Policy and App Store privacy label show a narrower current SDK footprint (one named vendor, Braze, for messaging) but still disclose broad automatic collection, AI chat logging, and routine sharing with numerous named service vendors, and set a 5-year post-deletion retention default. No independent audit, transparency report, or bug bounty was found.
TRACK RECORD
2 ENFORCEMENT ACTIONS
[2023-06-26]
The FTC's case page for Easy Healthcare Corporation, U.S. v. (Matter 202-3186) states the FTC reached a settlement with Premom's developer over allegations it deceived users by sharing sensitive personal information with third parties, including two China-based firms, disclosed users' sensitive health data to AppsFlyer and Google, and violated the Health Breach Notification Rule by failing to notify consumers of these unauthorized disclosures.
The FTC's May 2023 press release states the resulting order permanently prohibits Easy Healthcare from sharing users' personal health data with third parties for advertising, requires user consent before sharing personal health data with third parties for any other purpose, limits data retention to what is necessary, and comes with a $100,000 civil penalty (plus $100,000 paid to Connecticut, the District of Columbia, and Oregon).
Premom's Apple App Store privacy label states the app collects and links to a user's identity a broad set of categories -- Health & Fitness, Purchases, Financial Info, Location, Contact Info, User Content, Identifiers, Usage Data, Sensitive Info, and Diagnostics -- with some of that data used for the developer's advertising or marketing purposes.
Premom's Privacy Policy states that when a user interacts with its Ask AI chatbot feature, the information provided -- including chat logs and any Personal Information voluntarily shared -- is recorded and stored on Easy Healthcare's servers to operate and improve the feature.
Premom's About Us page names Sherry Liu as CEO & Co-Founder, states she co-founded Easy Healthcare Corporation (Premom's operator) in 2013 along with co-founder Li Zou, and its company timeline discloses an India subsidiary, Premom Health India Pvt. Ltd., launched in 2023.
The FTC's May 2023 press release states Premom integrated SDKs from app analytics providers Umeng and Jiguang and shared sensitive user data through them, including social media account information, precise geolocation, and non-resettable mobile device and Wi-Fi network identifiers, in addition to disclosing health data to AppsFlyer and Google; the release separately states Premom failed to adequately encrypt data shared with third parties, including firms in China.
Premom's Privacy Policy vendor table names third parties it may share user data with, including Facebook Login (Meta) and Google Sign-In (fact of app launch when used to log in), alongside other vendors such as Stripe, Pressable, and OneTrust listed elsewhere in the same table for payment, hosting, and cookie-consent purposes.
The FTC's May 2023 press release states the resulting order permanently prohibits Easy Healthcare from sharing users' personal health data with third parties for advertising, requires user consent before sharing personal health data with third parties for any other purpose, limits data retention to what is necessary, and comes with a $100,000 civil penalty (plus $100,000 paid to Connecticut, the District of Columbia, and Oregon).
The FTC's case page for Easy Healthcare Corporation, U.S. v. (Matter 202-3186) states the FTC reached a settlement with Premom's developer over allegations it deceived users by sharing sensitive personal information with third parties, including two China-based firms, disclosed users' sensitive health data to AppsFlyer and Google, and violated the Health Breach Notification Rule by failing to notify consumers of these unauthorized disclosures.
Premom's Privacy Policy discloses use of the Braze SDK to personalize the user's experience and deliver customized in-app messages, push notifications, and emails, subject to consent for Health and Well Being Information, with data shared through the SDK able to remain in Braze's internal systems for up to 90 days.