← Dating Apps
F

OkCupid

Fail
Match Group · 🇺🇸 United States
PolicyApp PermissionsNetwork TrafficFirmwareRegulatory
Technical details
App: com.okcupid.okcupid
Manufacturer: Match Group

⚠️ The bottom line

OkCupid promised to protect your personal data. The Norwegian government found it shipping your sexual orientation, drug use, and political views to 135 companies — Google, Facebook, and dozens of data brokers. Each packet included your GPS coordinates and device ID, so they knew exactly who you are and where you sleep. The Norwegian Consumer Council called it "out of control." When the government itself says your dating app is out of control, "committed to protecting" loses its meaning. OkCupid's co-founder wrote a blog post titled "We Experiment on Human Beings!" — with an exclamation mark, like it was fun. They deliberately told people they were 90% compatible when the algorithm said they weren't. Real people went on real dates, caught real feelings, based on numbers OkCupid knew were fake. His defense: "That's how websites work." Manipulating people's love lives to generate data is not how websites work. It's how research without consent works.

Legal jurisdiction
🇺🇸 United States (headquarters)
CLOUD Act read more →
US govt can demand your data from this company even if stored overseas
FISA §702 / PRISM read more →
NSA collects stored emails, photos, messages without individual warrants
Geofence warrants read more →
Police can demand location data for everyone near a crime scene
Spying
4/4 EXTREME
Is someone spying on me?
Data Sharing
4/4 EXTREME
Who gets my data?
Security
2/4 MODERATE
Is it actually secure?
Honesty
3/4 HIGH
Can I trust what they say?
REPLACE Extreme risk. Look for alternatives or lock down hard.
8Contradictions
4Critical
3High
1Medium
6Sources
Findings by concern
Spying 4/4 EXTREME 3 findings
⚠️ criticalmarketing claims vs third party research
OkCupid's co-founder wrote a blog post titled "We Experiment on Human Beings!" — with an exclamation mark, like it was fun. They deliberately told people they were 90% compatible when the algorithm said they weren't. Real people went on real dates, caught real feelings, based on numbers OkCupid knew were fake. His defense: "That's how websites work." Manipulating people's love lives to generate data is not how websites work. It's how research without consent works.

What they claim: OkCupid markets itself as using data science to find your best match — "We use math to get you dates."

What we found: Co-founder Christian Rudder (2014 blog post): "We experiment on human beings!" OkCupid deliberately told users they were highly compatible (90%+) when the algorithm calculated they were poor matches — to see if the suggestion alone would make them try harder. Users went on real dates, invested real emotions, based on compatibility scores OkCupid knew were lies. Rudder: "Guess what, everybody: if you use the Internet, you're the subject of hundreds of experiments at any given time, on every site. That's how websites work."

⚠️ criticalmarketing claims vs network analysis
OkCupid asks you hundreds of deeply personal questions. Have you used drugs? What's your sexual fantasy? How do you feel about abortion? You answer honestly because you think it helps find your match. Norway found those answers — tagged with your GPS coordinates and device ID — going to 135 advertising companies. The questions aren't for matching. They're the product. You thought you were looking for love. You were filling out the most intimate advertising survey ever designed.

What they claim: OkCupid presents its extensive question system as a way to "find better matches" through compatibility scoring.

What we found: OkCupid requires users to answer hundreds of personal questions covering sex, drugs, politics, religion, and mental health. Norwegian Consumer Council found these answers — including "Have you ever used drugs?", "What are you looking for?" (casual sex options), and political orientation — were transmitted to advertising partners tagged with GPS and device ID. The matching questions ARE the data collection mechanism. Users believe they're answering to find love. The answers are packaged and sold to 135+ companies.

⚠️ criticalpolicy claim vs regulatory finding
3 million people uploaded dating photos to OkCupid. OkCupid shared them with Clarifai — an AI facial recognition company. OkCupid's founder was an investor in Clarifai. Your dating profile photos trained facial recognition AI that profits a person who ran the dating app you trusted them with. When users found out, OkCupid lied — called it "old, publicly available data." When the FTC investigated, OkCupid tried to obstruct. The FTC sued. 20-year consent order. Your face, your dating profile, your location — given to an AI company your dating app's founder had a financial stake in. Then they lied about it. Then they tried to cover it up.

What they claim: OkCupid's privacy policy governed how user data including photos would be handled.

What we found: The FTC sued Match Group and OkCupid in March 2026 for sharing nearly 3 million user photos plus location data with Clarifai, an AI training company in which OkCupid's founder Sam Yagan was an investor. When users discovered the data sharing, OkCupid lied — telling users the photos were "old, already publicly available data." The FTC found OkCupid then tried to obstruct the investigation. Settlement: 20-year consent order. Your dating photos were used to train facial recognition AI by a company your dating app's founder had invested in. When caught, they lied. When investigated, they obstructed.

Data Sharing 4/4 EXTREME 4 findings
⚠️ criticalpolicy claims vs third party research
OkCupid promised to protect your personal data. The Norwegian government found it shipping your sexual orientation, drug use, and political views to 135 companies — Google, Facebook, and dozens of data brokers. Each packet included your GPS coordinates and device ID, so they knew exactly who you are and where you sleep. The Norwegian Consumer Council called it "out of control." When the government itself says your dating app is out of control, "committed to protecting" loses its meaning.

What they claim: OkCupid privacy policy: "We are committed to protecting your personal data."

What we found: Norwegian Consumer Council "Out of Control" report (January 2020): OkCupid shared GPS location, sexual orientation, drug use, and political views with at least 135 third-party companies including Google, Facebook, and data brokers. Data transmitted included answers to intimate questions like "Have you ever used drugs?" tagged with device ID and GPS coordinates. The Norwegian Data Protection Authority received formal GDPR complaints. Data was shared in ways that enabled individual identification — your sexual orientation, your GPS coordinates, your device ID, all bundled together.

⚡ highpolicy claims vs third party research
OkCupid promised to protect your data. In 2016, researchers scraped 70,000 users' profiles — usernames, sexual preferences, drug habits, location — and published it all online for anyone to download. The researchers said the data was "already public." The users who shared their sexual fantasies on a dating app didn't think "public" meant downloadable by their employer, their family, or a stalker. OkCupid's security didn't prevent the scrape. Nobody was notified.

What they claim: OkCupid privacy policy promises data security and protection of user information.

What we found: In 2016, Danish researchers scraped and publicly released data from 70,000 OkCupid users including usernames, age, gender, location, sexual preferences, drug use habits, and personality traits. The dataset was published on the Open Science Framework for anyone to download. Researchers argued the data was "already public" — but users had shared it within OkCupid's dating context, not for open publication. The data could be cross-referenced with other databases to identify individuals by username.

⚡ highpolicy claims vs regulatory findings
OkCupid says it complies with GDPR. The Norwegian government filed formal complaints saying it doesn't. Under GDPR, sexual orientation is "special category data" — the most protected class there is. OkCupid shared it with 135 companies. Not with informed consent. Through advertising code buried in the app that transmitted your data before you could read the privacy policy. Europe built the strongest privacy law in the world. OkCupid treated it like a suggestion.

What they claim: OkCupid privacy policy claims GDPR compliance and lawful data processing.

What we found: Norwegian Consumer Council filed formal GDPR complaints against OkCupid with the Norwegian Data Protection Authority (Datatilsynet) in January 2020. The complaint alleged OkCupid violated GDPR Articles 6 (lawful processing), 9 (special categories of data — sexual orientation is explicitly protected), and 5 (data minimization). Sexual orientation is classified as "special category data" under GDPR requiring explicit consent for processing. OkCupid shared it with 135 companies via embedded SDKs without meaningful consent.

⚫ mediummarketing claims vs third party research
OkCupid says it's free. You pay with your sexual orientation, your drug history, your political beliefs, and your exact GPS location — sold to 135 companies. If you want the algorithm to stop hiding your profile, that'll be $30-60 a month. Free means your intimate confessions become ad targeting data. Premium means you pay cash AND your intimate confessions become ad targeting data. "Dating deserves better" is the one thing OkCupid got right.

What they claim: OkCupid markets itself as a free dating platform — "Dating deserves better."

What we found: The Norwegian Consumer Council documented that OkCupid's "free" tier monetizes users through extensive data sharing with 135+ advertising partners. Users pay with the most intimate data imaginable — sexual orientation, drug use, political views, GPS location — all packaged and sold. Match Group also degrades the free experience over time, limiting matches and visibility to push users toward OkCupid Premium ($30-60/month). The "free" version generates revenue by selling your intimate answers to advertisers. You pay either way.

Security 2/4 MODERATE 1 finding
⚡ highpolicy claims vs regulatory findings
You answered 300 personal questions on OkCupid — your kinks, your drug history, your politics. Match Group bought OkCupid in 2011 and pooled that data with Tinder, Hinge, and 40 other brands. Your sexual orientation from OkCupid informs ad targeting on Tinder. Match Group tells the SEC this data is a "competitive advantage." You confided in one app. A $3.2 billion corporation absorbed your confessions into an advertising machine spanning 40 brands.

What they claim: OkCupid implies data is used to improve the OkCupid matching experience.

What we found: Match Group acquired OkCupid in 2011. OkCupid's intimate question-and-answer data — sexual orientation, drug use, political beliefs, relationship preferences — feeds into Match Group's unified data infrastructure serving 40+ dating brands. Match Group's 2023 10-K identifies cross-brand data as a competitive advantage. Your OkCupid sexual preferences can inform ad targeting on Tinder. A single breach at any Match Group property could expose the most intimate details you shared on a completely different app.

Sources