0 Concern2 Mixed2 Positive
B73 / 100
In Plain English
Oura collects a lot of sensitive health data to run the service, but they don't sell it, give you real control over it, and are clearer than most about what they do with it.
Category Breakdown
Known data breaches
No known public data breaches
Oura does not appear in the Have I Been Pwned database of publicly disclosed data breaches.
How Oura could earn a higher grade
Recommended changes
- Publish specific retention periods for each health data category (sleep, heart rate, temperature, activity) rather than a blanket policy.
- Provide a binding commitment that health data will never be sold to insurance companies, employers, or health data brokers — even after an acquisition.
- Publish a data processing addendum for enterprise customers that includes what employee ring data their employer can access.
- Add a clear opt-out from research partnerships that allows users to stop their anonymised health data being used in third-party studies without losing app features.
- Strengthen the M&A clause: commit to user consent (not just notification) before health data is transferred to any acquirer.
Compare with
See all Device & wearable privacy grades →
Embed this grade
Display Oura's privacy grade on your own site. The badge links back to this analysis page.
<iframe src="https://privacy-decoded.com/badge/oura" width="240" height="72" frameborder="0" scrolling="no" title="Oura Privacy Grade — Privacy Decoded" ></iframe>