&gt; I wonder if they could make a case that it violates the HIPAA, since your heartbeat&#x2F;activity tracker info is on the device?<p>HIPAA privacy protections only apply to data held by HIPAA &quot;covered entities&quot;, which are mostly insurers, health care providers, and their business associates, and they restrict disclosures <i>by</i> those covered entities.