- cross-posted to:
- privacy@programming.dev
- cross-posted to:
- privacy@programming.dev
The team behind menstrual health and period tracking app Clue has said it will not disclose users’ data to American authorities, following Donald Trump’s reelection.
The message comes in response to concerns that during Trump’s second presidency, abortion bans that followed the overturn of Roe v. Wade in 2022 will worsen and states will attempt to increase menstrual surveillance in order to further restrict access to terminations.
They say that, but when Ken Paxton subpoenas them they will say they have no choice. It would be better to use an app that doesn’t store this data server side at all.
FOSS Period Tracking Apps Exist: (there may be others, as well)
https://fossdroid.com/a/bluemoon.html
https://fossdroid.com/a/mensinator.html
https://github.com/TotallyMonica/foss-period-tracker
Also paper and pencil.
Also the oldest known “writing” is a stick with 28 notches on it.
source on the 28 notch stick?
It was some time ago that I read of that, so the details are fuzzy. And here’s what I found:
https://nypost.com/2019/07/25/10000-year-old-engraved-stone-could-be-worlds-oldest-lunar-calendar/
“A 10,000-year-old engraved stone could be a lunar calendar. The rare pebble — found high up in the mountains near Rome, Italy, the hammer-stone was found on top of Monte Alta in the Alban Hills. It’s believed that our early ancestors would’ve used the stone to keep track of the moon’s cycles. Notches were engraved “as if they were being used to count, calculate or store the record of some kind of information. And these notches — which total either 27 or 28 — suggest the stone’s engraver used the pebble to track lunar cycles.” ref
It could also have been The Ishango Bone (https://www.thedailybeast.com/the-ishango-bone-the-worlds-oldest-period-tracker/)
How does an app being FOSS defend them from warrants?
Edit. Thank you guys for the details. I learneded something new today, much appreciated.
FOSS implies it’s your hardware, therefore a subpoena would extract no information because there is no information outside of the users device.
Interesting, thank you. I guess I don’t know enough about FOSS then.
“Free and open source software.” It’s an ethos that says that code should be free and open for people to use and improve as they see fit. The core of it is that if you modify any software that is FOSS, your software must also be FOSS. So overtime the software and what its used for improve, change, widen. Lucky for us, the movement has been ongoing for 50+ years, so it’s a mature ethos whose benefits are everywhere. Most of the internet runs on FOSS. Lemmy itself is FOSS.
It doesn’t necessarily mean an app is more private, but it does mean you can generally self host, as the commentor said. There isn’t a profit motive with most FOSS, at least not at its core, so there is little desire to data harvest generally. There is also a heavy overlap between FOSS advocates and privacy advocates, so they tend to be more privacy conscious via local data storage or encryption.
Just to key in on the overlap between FOSS and privacy, because the source code for the software is open, it means that anyone can take a peek at how everything is running under the hood (among other things). It becomes possible to verify that software is storing data locally and properly encrypting when applicable (as opposed to blindly trusting the software’s author and or lawyers).
It may also be a fun fact that best practice in encryption is to open source your algorithms. The helps safeguard against backdoors and mistakes/ errors that could compromise the security of the algorithm. Much for similar reasons as above, as it allows the security community to check your math (in a field where it is incredibly easy to get your math wrong).
Ok yeah, I understood everything in your first paragraph. The privacy part was what I was really asking about. So if you’re not self hosting you’re still at the whim of the person/company/whatever that is.
You could also argue that if even if you’re not self-hosting (i.e. renting server hardware from a 3rd party), your data is still in a siloed environment. While it may be accessible by law enforcement if you are targeted specifically, it’s unlikely to be dragnetted like the data collected from popular apps.
Something being FOSS doesn’t necessarily mean it’s safe / ethical, but a LOT of FOSS apps are designed with those principles in mind.
However, being FOSS means that if an app claims that it is safe / ethical (ex. In this case, not storing data anywhere but on your device), you or an experienced peer can check the code to verify that fact.
It doesn’t, but with these apps, you can see what information they send back to their servers (if any). If there is no info getting sent back to any servers, then there’s nothing a subpoena can do since there’s no info to subpoena. You can’t obtain info that just isn’t there.
That makes sense. Thank you!
deleted by creator
https://f-droid.org/en/packages/de.arnowelzel.android.periodical/