Skip to content
WHOOP
SMART HOME & IOT
LAST UPDATED 19 AUG 2026

WHAT THE POLICIES SAY

WHOOP is a subscription fitness-wearable and app made by WHOOP, Inc., a private, venture-backed US company headquartered in Boston. WHOOP's own privacy pages state it never sells members' personal data and will only share it with others if the member asks, while separately listing routine sharing with service providers, advertising partners, and a third-party LLM partner that powers its WHOOP Coach feature. Its App Store privacy label discloses a broad set of health, contact, and usage data linked to a member's identity for advertising/marketing and product-personalization purposes, but does not declare any data category used to track users across other companies' apps. In July 2025 the FDA sent WHOOP a warning letter concluding its Blood Pressure Insights feature was an unapproved medical device -- a device-regulatory action about a specific feature, not a finding about data privacy practices. No FTC, state-AG, or other privacy-specific enforcement action or breach was found via primary sources during this review.

TRACK RECORD

1 ENFORCEMENT ACTION
[2025-07-14]
The FDA's July 14, 2025 warning letter (CMS #709755) to WHOOP states the company was marketing its Blood Pressure Insights feature in the United States without FDA marketing clearance or approval, classifying the feature as an unapproved medical device under the Food, Drug and Cosmetic Act -- a device-regulatory action concerning one feature's marketing claims, not a data-privacy enforcement action, breach, or lawsuit.
fda.gov ↗

TIMELINE

NO ENTRIES ON FILE YET.

TOOLS WE RECOMMEND

PLUS

RECEIPTS

9 ON FILE
COLLECTION
WHOOP's full Privacy Policy discloses that it collects 'wellness data,' a broad category spanning physiological metrics (resting heart rate, HRV, respiratory rate, skin temperature, blood oxygen saturation), motion/acceleration data, sleep and workout metadata, a physiological profile (birthday, gender identity, weight, height, athlete level), and self-submitted details about habits, diet, medications, and female health tracking.
web.archive.org ↗
COLLECTION
WHOOP's Apple App Store privacy label lists Health & Fitness, Location (Coarse), Contact Info (Email), Usage Data, and Identifiers as data 'Linked to You,' used for purposes including the developer's own advertising or marketing and analytics, not solely app functionality.
apps.apple.com ↗
OWNERSHIP TRANSPARENCY
WHOOP's Apple App Store listing identifies the app's Seller as 'Whoop Incorporated' and its copyright holder as 'WHOOP, Inc.' -- an independent, Apple-hosted confirmation of the operating corporate entity's name.
apps.apple.com ↗
[2025-07-14] · OWNERSHIP TRANSPARENCY
The FDA's warning letter to WHOOP is addressed to WHOOP, Inc. at One Kenmore Sq. Suite 601, Boston, MA 02215, and to named CEO Will Ahmed -- a federal regulator's own document independently corroborating the company's legal name, registered address, and leadership, though it does not disclose any parent company, investor, or ownership structure.
fda.gov ↗
SHARING
WHOOP's full Privacy Policy provides a CCPA-specific mechanism to 'opt out of the selling or sharing' of personal data and of processing for targeted advertising, and states that for the 12-month period prior to the policy's date, WHOOP has not sold any personal data.
web.archive.org ↗
SHARING
WHOOP's privacy-principles page states WHOOP never sells members' personal data as a matter of business-model promise, and that it will otherwise share personal data with others only if the member asks it to; the same page elsewhere lists routine sharing with service providers, advertising partners (via cookies, for interest-based advertising), a third-party LLM partner powering WHOOP Coach, and law enforcement/government authorities.
web.archive.org ↗
[2025-07-14] · TRACK RECORD
The FDA's July 14, 2025 warning letter (CMS #709755) to WHOOP states the company was marketing its Blood Pressure Insights feature in the United States without FDA marketing clearance or approval, classifying the feature as an unapproved medical device under the Food, Drug and Cosmetic Act -- a device-regulatory action concerning one feature's marketing claims, not a data-privacy enforcement action, breach, or lawsuit.
fda.gov ↗
TRACKING TECH
WHOOP's privacy-principles page states that WHOOP uses third-party cookies and other tracking technologies on its website, explicitly invoking the CCPA's broad statutory definition of 'sale' as the reason this practice is called out.
web.archive.org ↗
TRACKING TECH
WHOOP's Apple App Store privacy label declares no 'Data Used to Track You' category at all -- unlike some peers, WHOOP does not self-report cross-app/cross-site tracking to Apple -- but does list Analytics and Diagnostics (Performance Data, Other Diagnostic Data) collected without being linked to identity, under 'Data Not Linked to You.'
apps.apple.com ↗
LAST REVIEWED 2026-08-19 · METHODOLOGY v1.7