The Internet Already Knows I'm Pregnant
How internet tracking reveals intimate personal information through data collection and analysis.
Summary
### The Explosive Growth of Mobile Femtech Apps At 00:00, Cooper Quintin, senior staff technologist at the Electronic Frontier Foundation (EFF), and Kashmir Hill, investigative technology reporter at Gizmodo, open with a groundbreaking investigation into the privacy practices of menstrual cycle and pregnancy tracking applications on Android. With millions of women relying on mobile apps to manage reproductive health, fertility, and pregnancy milestones, the speakers highlight that intimate medical telemetry has quietly transformed into a highly lucrative digital commodity.
### Reverse Engineering App Binaries with JADX At 06:30 and 12:15, Quintin details the technical methodology used to audit popular reproductive tracking applications (including BabyCenter, Ovia, Glow, and Flo). Using the open-source decompiler JADX, the researchers performed static code analysis on APK binaries, identifying embedded third-party advertising, analytics, and tracking software development kits (SDKs). They mapped extensive hardcoded API endpoints and unencrypted storage routines inside the decompiled Java source code.
### Intercepting Sensitive Biometric Data Transmissions At 18:13, the presentation explores dynamic network traffic analysis. By routing mobile device traffic through an intercepting HTTP proxy and installing custom root certificates, the researchers inspected the payload data transmitted during active app usage. They revealed that applications were transmitting highly sensitive personal telemetry—including sexual intercourse frequency, contraception use, pregnancy test results, medical symptoms, and mood logs—to third-party commercial analytics platforms and Facebook Graph APIs.
### Consumer Profiling, Data Brokers, and Behavioral Advertising At 25:40 and 31:20, Kashmir Hill analyzes the commercial ecosystem fueling this data collection. Expectant mothers represent one of the most commercially valuable demographic segments in retail marketing, as pregnancy triggers profound shifts in brand loyalty and household spending. Hill reveals how data brokers correlate mobile advertising IDs (OAID/GAID), location logs, and pregnancy milestones to serve aggressive targeted advertising, often alerting retailers to a pregnancy long before family members are informed.
### Legal Risks and Reproductive Privacy Protections Concluding between 34:00 and 36:26, the speakers examine the grave legal, societal, and reproductive privacy implications of commercial health tracking. In jurisdictions with restrictive healthcare laws, unencrypted reproductive databases and commercial location histories can be subpoenaed by law enforcement or weaponized in legal proceedings. They urge consumers to audit app permissions, utilize privacy-respecting alternatives, and demand robust federal data privacy legislation that treats reproductive telemetry with strict medical confidentiality.
(AI summary — Gemini 3.8 Flash)
Related talks
Privacy Village·40 min
Jim Nitterauer
DNS query monitoring and tracking as a privacy threat to user anonymity.
Privacy Village·20 min
Peyton Engel
Analysis of government surveillance software tools and their privacy implications.
Privacy Village·43 min
Roger Dingledine
Tor's next-generation onion services architecture and improvements for hidden service security.


