[LEAK] BeatBird is selling your sleep and heart-rate data to an insurer

I work at BeatBird. I hesitated for a long time before writing this, but I realised users have a right to know.

Last Friday, senior management sent an internal memo marked 'confidential': from October, BeatBird will package users' sleep data, resting heart rate and menstrual cycle records, 'de-identified', and hand them to Dingyue Insurance to help price premiums.

The problems: 1. The app's privacy policy has never mentioned this. 2. The so-called 'de-identification' only swaps names for an ID. Birthdays, postcodes and device IDs are all still there. With those three, matching people back is not hard. 3. The company's legal team has known about this deal all along and chose not to update the terms.

The attached photo is of the memo. I turned off location and used a brand-new account.

Taiwan's Personal Data Protection Act is not an ornament. That's all.

Attachment: PXL_20260914_144712345.jpg

483 KB · original

Download original

This is a real JPEG. To check it with exiftool on your own computer, save it to your computer.

The memo in the photo is in Chinese; you won’t need to read it to solve the case.