Polar and Oura: EU Fitness Trackers Cashing Out Health Data to US AWS Servers
Both Polar and Oura, cited as EU fitness options, are reportedly transmitting sensitive health data to Amazon Web Services (AWS). This immediate data routing triggers deep jurisdiction alarms for the participant.
The core debate centers on tracking cardio output while strictly adhering to GDPR's Article 9 rules for health data. The general sentiment, voiced strongly by the original poster, rejects any device whose data pathway touches US, Chinese, Russian, or Israeli jurisdictions. There are no visible direct user attacks, but the entire discussion pivots on geographic data sovereignty.
The community recognizes a major hurdle: finding an off-the-shelf tracker that guarantees data residency outside flagged geopolitical zones. While the long-term ambition is self-hosting, the immediate need reveals a critical gap in market accountability for GDPR-compliant, geographically neutral health monitoring.
Key Points
#1EU options fail on data jurisdiction.
The poster explicitly flagged Polar and Oura because both send data to AWS, violating the desired data sovereignty.
#2GDPR Article 9 compliance is the legal focus.
The entire concern rests on Article 9 of GDPR, the rules governing sensitive health data processing.
#3The forbidden data destinations are clear.
The user mandates that data must avoid transmission to the US, China, Russia, or Israel.
#4Self-hosting remains the ideal, but not the current reality.
The poster acknowledged a low current capability for self-hosting, suggesting this is a future, advanced goal beyond quick consumer purchases.
Source Discussions (3)
This report was synthesized from the following Lemmy discussions, ranked by community score.