A federal jury in San Francisco found Meta liable under the California Invasion of Privacy Act for improperly collecting and using sensitive reproductive health data from users of the Flo Health app.
The case revealed that Meta’s embedded SDKs harvested intimate details—like menstrual cycles and pregnancy intentions—without informed consent, violating state privacy laws.
This landmark ruling signals a turning point for digital privacy enforcement, especially around health data and ad-tech practices
This verdict has the power to send a clear message to Big Tech: the era of unchecked data harvesting is over, especially when it comes to the most intimate details of our lives. “Should” is the operative word because big tech does not have a shining track record of respecting personal information and data of others.
Evidence presented at trial revealed that Meta’s software development kit (SDK) embedded in Flo Health’s app recorded deeply personal information — menstrual cycles, pregnancy intentions, ovulation data — without user consent. This data was then used to fuel Meta’s targeted advertising algorithms.
The jury’s decision was unequivocal: Meta did not have consent. Damages could reach billions, and the chilling effect on ad-tech’s appetite for sensitive health data should be felt for years. This case is one of the first times a jury has pierced the veil of Big Tech’s data collection machinery.
It also underscored what privacy advocates have been shouting for years: If data can be collected, it can be misused.
At Purism, our approach is simple: We don’t collect any data from your device.
Because we never collect your data, we cannot misuse it. There is no “trust us” clause — there’s nothing to trust us with. This is privacy by design, not privacy by promise.
*Note: Purism receives customer shipping details to ship our products, but our products running on our OS have no user data collection on the device and never will.
The Meta verdict is a warning shot to every company that treats user data as a limitless resource. It affirms that:
For Purism, it’s validation. We’ve built our business on the principle that privacy is a human right, not a settings toggle. This verdict proves that the market — and now the courts — are catching up.
Bottom line: The safest data is the data never collected. Purism’s model ensures that your most personal information never becomes someone else’s business model.
You can read the full case coverage on Lawdragon’s report.
Model | Status | Lead Time | ||
---|---|---|---|---|
![]() | Librem Key (Made in USA) | In Stock ($59+) | 10 business days | |
![]() | Liberty Phone (Made in USA Electronics) | In Stock ($1,999+) 4GB/128GB | 10 business days | |
![]() | Librem 5 | In Stock ($799+) 3GB/32GB | 10 business days | |
![]() | Librem 11 | In Stock ($999+) 8GB/1TB | 10 business days | |
![]() | Librem 14 | Out of stock | New Version in Development | |
![]() | Librem Mini | Out of stock | New Version in Development | |
![]() | Librem Server | In Stock ($2,999+) | 45 business days | |
![]() | Librem PQC Encryptor | Available Now, contact sales@puri.sm | 90 business days | |
![]() | Librem PQC Comms Server | Available Now, contact sales@puri.sm | 90 business days |