Like other private healthtech products, fitness and nutrition trackers as well as an emerging market of AI-based health diet and exercise coaches collect information that is not considered personal health information protected by HIPAA.

The same reason why wearable fitness devices are popular are the same reason why they are potentially vulnerable: data about your physical activity, vitals like heart rate and lung function, sleep, and more is more likely than not synched to the cloud and/or linked hardware like your laptop or smartphone. Since HIPAA does not cover fitness trackers, it is even more critical to understand where your health data is stored and potentially shared.