This is the second time [1] that analytics in period apps have been problematic, and also follows the recent hack of MixPanel [2] exposing OpenAI usage data. Seems like 3rd-party analytics are becoming a new frontier for security issues.

[1] https://www.thebureauinvestigates.com/stories/2025-09-03/met...

[2] https://openai.com/index/mixpanel-incident/

That one was a security incident—data that had been legitimately collected by an analytics provider was exposed due to a breach.

This one is about privacy — what data an app chooses to collect and which third parties it intentionally sends that data to. The concern isn't that someone hacked those companies. The distinction is important for us.

Disclaimer: RudderStack founder.