Oura confirms it receives government data requests

Oura has confirmed it receives government demands for user data [Week in Security]. The company, known for its health-tracking ring that collects heart rate, sleep, and activity data, did not disclose how many requests it has received or how often it complies.

The disclosure emerged in a report by Week in Security, which noted that Oura acknowledged the demands but stopped short of publishing transparency report figures like those issued by Apple or Google. Without those numbers, users cannot assess the scale or frequency of government access to their health data.

Wearable devices now capture highly personal information — including body temperature, respiratory rate, and sleep patterns — that can reveal medical conditions, daily routines, and even location histories. When governments seek that data, it raises immediate privacy concerns, especially in jurisdictions with weak digital rights protections.

Oura’s stance mirrors broader industry patterns. Apple, Fitbit, and Garmin publish biannual transparency reports detailing government data requests. Oura does not. That lack of reporting makes it harder for users to evaluate whether the company resists overbroad demands or hands over data without scrutiny.

The U.S. Stored Communications Act allows government entities to obtain user data through subpoenas, court orders, or warrants — with varying levels of judicial oversight. Health data from wearables is not automatically protected under HIPAA unless collected by a covered entity like a doctor or insurer. That gap leaves millions of users exposed.

Until Oura releases a full transparency report, users must assume their data could be shared without notice. The company says it reviews each request for legality but has not committed to notifying users when possible, a standard practice among more transparent tech firms [Week in Security].