Why does a kids' fitness app need your child's precise location, their contacts, or a persistent advertising ID? In most cases the honest answer is that it does not. The less honest answer lives in the privacy policy, buried under clauses about personalization and improved services. Fitness data from children is more sensitive than most parents realize: a step trace can reveal where they live, where they go to school, and roughly when they're home. The FTC has been examining these apps since 2012 and found that many share data with third parties without meaningful disclosure. This is not a theoretical problem. It's a permissions screen you can fix tonight.
The Pitch
The app presents itself as a cheerful coach. It counts steps, rewards streaks, and lets your child earn digital badges. The goal is movement, and the design is sticky. That's the pitch: a fun way to build healthy habits.
But the pitch rarely mentions the data flow. The app needs to know your child's age, gender, and weight to calculate calories. It wants location to map a run. It asks for contacts if your child wants to challenge friends. Each of those permissions expands the data trail.
The FTC's 2012 survey of kids' apps found that many collected a user's name, geolocation, birth date, and device identifiers, often without clear notice. Some even shared that information with advertising networks or analytics companies. The app store listing said one thing; the actual behavior was another.
When a fitness app is free, the economics usually depend on data aggregation. Your child's activity patterns become part of a profile that can be sold or used for targeted advertising. That's not a scandal by itself—it's legal in most places—but it's a thing a parent should know before tapping install.
What They Collect
Start with the obvious: step count, distance, active minutes. Then add the less obvious: precise geolocation, accelerometer data, heart rate if the device has a sensor, and the times of day your child is active. Together, these create a detailed map of daily life.
Many apps also collect device identifiers—the IDFA on iOS, the AAID on Android—which let advertisers track your child across other apps. The FTC's testing found that some kids' apps shared these identifiers with third parties, even when the privacy policy said they didn't. The 2012 report noted one app whose privacy policy was literally copied from an employment contract. It said nothing about data collection.
The privacy policy is where the truth hides. Look for what data is collected, who it's shared with, and how long it's kept. The Verge's review of fitness app policies found wide variation: some were clear, some were vague, and some reserved the right to share data with unnamed partners. If the policy says "affiliates" or "service providers," you have no way to know who those are.
What They Don't Tell You
The big omission is resale. Apps rarely say, in plain language, that your child's activity data may be sold to data brokers or used to build a profile for advertising. The FTC's best practices for mobile health app developers recommend "just in time" notice—telling users before the app collects sensitive data, not just in a policy nobody reads.
Another omission is retention. Some apps keep data indefinitely. Even if you delete the app, the server-side records may remain. WIRED notes that even with privacy settings turned to private, the data is not truly private—the company can still access it, and so can anyone who subpoenas it.
Then there's the social feature. The app may encourage your child to share workouts with friends, but that sharing can extend beyond your intended circle. The Verge's piece makes the point that sharing with friends is different from sharing with an anonymous marketer. The app doesn't always distinguish.
Finally, there's the question of who the data is shared with. The FTC's 2012 report found that kids' apps shared data with advertising networks and analytics companies, often without clear disclosure. That's the part the marketing doesn't mention.
Your Move
You don't need to throw the phone in a lake. You need to do a five-minute audit.
First, read the privacy policy. Yes, the whole thing. Look for data sharing, retention, and whether there's an opt-out. The FTC recommends that developers provide this information clearly; if the app doesn't, that's a red flag.
Second, check the app's permissions. On iOS, go to Settings > Privacy; on Android, Settings > Apps > [app] > Permissions. Remove anything that doesn't directly serve the fitness function. Does a step counter need your contacts? Probably not. Does it need precise location? Only if it maps routes. If it does, consider denying it and using the app without that feature.
Third, turn off advertising ID tracking. On iOS, go to Settings > Privacy > Tracking and disable "Allow Apps to Request to Track." On Android, go to Settings > Privacy > Ads and turn on "Delete advertising ID." This limits cross-app tracking.
Fourth, if the app offers an opt-out of data sharing, take it on day one. Many apps have a setting for that, often hidden in the privacy section. If there's no opt-out, consider whether the app is worth the data.
Finally, talk to your child. Explain that some apps collect information and that you're going to set limits. Kids understand fairness. They'll appreciate the honesty.
The goal is to keep the movement without giving away the map. You can have both—if you read the fine print and adjust the settings. The FTC has been telling developers to be transparent since 2012. It's time to hold them to it.
FAQ
What if my child's fitness app has no privacy policy at all?
That's a hard no. Any app that handles children's data and lacks a privacy policy is violating basic norms and likely the law. Uninstall it and find an alternative that at least pretends to care.
Can I use a fitness app with my child without creating an account?
Sometimes. Some apps let you skip account creation and use guest mode, but that often disables features like saving progress. If you must create an account, use a nickname and don't link it to your child's real name or email.
Is it safe to let my child use a fitness app if I turn off all permissions?
Turning off permissions like location and contacts reduces the data collected, but the app may still collect basic usage data and device identifiers. It's safer, but not invisible. Check the app's behavior and decide if the tradeoff is worth it.
