Oura Security & Privacy Scorecard

Version 7.10.2 (Build 2603251727) | Analyzed 2026-03-27

What This Means for You

Activity, sleep, and health metrics are shared with analytics and marketing platforms including Segment, Amplitude, and Braze. This data may be used to personalize messaging and measure how users engage with the app. Network connections are handled securely, but the breadth of third-party data sharing is worth considering given how personal this health data is.

Recommendation: Use With Caution

Best For: Tracking sleep and health with a connected ring

Avoid If: Keeping health data off ad platforms is a priority

Key Findings

Data Security - 3 findings (2 medium, 1 low)

Network Security - 0 findings

Code Safety - 0 findings

Privacy - 3 findings (1 high, 1 medium, 1 low)

Privacy Concerns

What Data is Collected

Oura collects detailed health and biometric information including sleep stages, heart rate, activity levels, body temperature, and daily readiness scores. This data is associated with the user's account and processed on Oura's servers.

Third-Party Data Sharing

Health data and in-app behavior are shared with the following third-party services:

• Segment - Behavioral analytics and data routing
• Amplitude - Usage behavior and product analytics
• Braze - Marketing automation and push notifications
• Zendesk - Customer support
• Sentry - Error and crash reporting
• Curity HAAPI - Secure login and authentication

Understanding the Scores

Positive Security Features

• Network communications are fully protected using secure protocols throughout the app
• App code met all safety benchmarks, with clean results across every check
• Authentication is handled through a dedicated security framework (Curity HAAPI)

Areas for Improvement

• Health data is routed to multiple analytics and marketing services. Reviewing Oura's in-app privacy settings and data-sharing options is worthwhile given how sensitive this information is.
• Some data stored on the device could benefit from stronger protections. Highly personal health information deserves the highest level of on-device security.
• The controls available for limiting what data is shared with third parties are limited. Clearer, more granular options would give users greater confidence over what leaves the device.

About This Analysis

This scorecard is based on static analysis of the app's code and configuration. Scores reflect the app's technical practices as observed at the time of analysis and are intended to help you make an informed decision about the apps you use.

App Details