← Wearables
D

Fitbit Charge 6

Serious concerns
Fitbit · 🇺🇸 United States · Bluetooth
PolicyApp PermissionsNetwork TrafficFirmwareRegulatory
Technical details
FCC ID: XRAFB423
App: com.fitbit.FitbitMobile
Manufacturer: Fitbit LLC (Google)

⚠️ The bottom line

Google's Fitbit Charge 6 straps sensors to your wrist collecting heart rate 24/7, blood oxygen, skin temperature, stress, menstrual cycles, and GPS. Google gets all this for free. Then charges $9.99/month for Fitbit Premium to see "deeper insights" into your own body's data. You are paying Google to collect your most intimate health information, then paying again for them to tell you what it means. Google monetises your heartbeat twice: once as data, once as a subscription. Google told regulators buying Fitbit wouldn't reduce choice and Fitbit would keep its identity. Since then: web dashboard shut down, accounts forcibly migrated, app absorbed into Google, Fitbit as an independent company — gone. What remains is a logo on a Google product. Every assurance Google gave to win approval has been systematically dismantled. Fitbit's 29 million users didn't choose Google. Google was chosen for them, and regulators waved it through.

Legal jurisdiction
🇺🇸 United States (headquarters)
CLOUD Act read more →
US govt can demand your data from this company even if stored overseas
FISA §702 / PRISM read more →
NSA collects stored emails, photos, messages without individual warrants
Geofence warrants read more →
Police can demand location data for everyone near a crime scene
D
Parent company: Google (Alphabet)
PRISM participant since 2009, CLOUD Act jurisdiction (US), $170M COPPA violation (YouTube Kids) +1 more
4 structural risks · 37 products →
Grade raised from C to D due to parent company risks
Spying
0/4 N/A
Is someone spying on me?
Data Sharing
0/4 N/A
Who gets my data?
Security
0/4 N/A
Is it actually secure?
Honesty
3/4 HIGH
Can I trust what they say?
CONFIGURE High-risk areas that can be partially mitigated with settings changes.
4Contradictions
1Critical
3High
0Medium
3Sources
Findings by concern
Honesty 3/4 HIGH 4 findings
⚠️ criticalpolicy claims vs app permissions
Google's Fitbit Charge 6 straps sensors to your wrist collecting heart rate 24/7, blood oxygen, skin temperature, stress, menstrual cycles, and GPS. Google gets all this for free. Then charges $9.99/month for Fitbit Premium to see "deeper insights" into your own body's data. You are paying Google to collect your most intimate health information, then paying again for them to tell you what it means. Google monetises your heartbeat twice: once as data, once as a subscription.

What they claim: Fitbit Charge 6 collects health data to help users achieve fitness goals, with Premium for deeper insights.

What we found: Continuously collects HR, SpO2, skin temp, sleep, stress, steps, calories, GPS. Premium locks analysis behind $9.99/month. Google monetises the same data twice — collecting it under its ad-adjacent policy, then charging users to see insights from their own data.

⚡ highpolicy claims vs regulatory findings
Google told EU regulators: "Fitbit health data stays separate from ads for 10 years." The EU approved the $2.1 billion acquisition. Four years later, every Fitbit user is forced into a Google account or their device bricks. Heart rate, sleep, menstrual cycles, stress — all under the same policy as Google searches and YouTube history. The "separation" is a toggle Google controls. The EU's enforcement is Google checking Google's homework.

What they claim: Google promised EU regulators Fitbit health data won't be used for ads for 10 years.

What we found: Fitbit users forced to migrate to Google accounts by May 2026. Health data under Google's unified policy. The separation is now a checkbox, not a structural barrier. Enforcement relies on Google self-certifying compliance.

⚡ highpolicy claims vs app permissions
You paid $160 for a Fitbit Charge 6 and spent years building a health history. Now Google says: create a Google account by May 2026 or your Charge 6 becomes a $160 bracelet that tells time. Miss July and Google permanently deletes your health records. They're not asking. Migrate or lose everything. Enough people have fled to Garmin that competitors are building Fitbit data import tools specifically for the refugees. Google calls this an "enhanced experience."

What they claim: Google says Fitbit migration provides an enhanced experience with better Google integration.

What we found: Users who don't migrate by May 19, 2026 lose all device access. Miss July 15 and data is permanently deleted. Users who paid $100-300 for hardware are told devices become paperweights. Garmin has seen user influxes from frustrated Fitbit customers.

⚡ highpolicy claims vs regulatory findingsPartially addressed
Google told regulators buying Fitbit wouldn't reduce choice and Fitbit would keep its identity. Since then: web dashboard shut down, accounts forcibly migrated, app absorbed into Google, Fitbit as an independent company — gone. What remains is a logo on a Google product. Every assurance Google gave to win approval has been systematically dismantled. Fitbit's 29 million users didn't choose Google. Google was chosen for them, and regulators waved it through.

What they claim: Google assured regulators Fitbit would maintain its identity and user choice would be preserved.

What we found: Since the acquisition: Fitbit web dashboard shut down, accounts forcibly migrated, the app absorbed into Google. Fitbit as an independent company no longer exists. Every assurance given to win regulatory approval has been systematically dismantled. 29 million users didn't choose Google.

What happened to real people
Documented incidents involving Fitbit products and user data.
Jorge Molina jailed 6 days for murder via geofence warrant based on Google Sensorvault location data. Lost job, car, reputation. Charges never filed. [source]
PRISM participant since 2009. NSA collects stored communications. FBI conducts warrantless 'backdoor searches' of American data using names and email addresses. [source]
Google received 180 geofence warrants per week by 2019. Each warrant searches tens of millions of accounts. Supreme Court hearing constitutionality (Chatrie v. United States). [source]
What your data is worth to governments
Google complied with 235,000 government data requests in H1 2024. That's +530% over 10 years. Google has been a confirmed PRISM participant since 2009. Under this programme, the NSA collects stored communications. The company is legally prohibited from telling you. Jurisdiction: US (CLOUD Act, FISA Section 702, Patriot Act).
Documented: Jorge Molina jailed 6 days for murder via geofence warrant based on Google Sensorvault location data. Lost job, car, reputation. Charges never filed.
Documented: PRISM participant since 2009. NSA collects stored communications. FBI conducts warrantless 'backdoor searches' of American data using names and email addresses.
What is PRISM? · What is the CLOUD Act? · Transparency report
Sources