You share your body measurements, progress photos, and health struggles with your favourite fitness influencer's app. You trust her. But the app is Trainerize — a platform run by ABC Fitness Solutions that powers 400,000+ trainers. Your data goes to ABC, not to your trainer. And Trainerize's own terms say they "cannot and do not guarantee any confidentiality whatsoever." Your before-and-after photos, your weight, your food diary — on a platform that won't even promise to keep it private. A nutritionist tracks your eating disorder recovery on Trainerize. A trainer logs your injury rehab. A coach records your mental health notes alongside workout plans. This is health data by any definition. Trainerize says it's not HIPAA compliant and won't sign healthcare data agreements. Clinical-grade data, consumer-grade protection.
What they claim: Trainerize promotes itself as the trusted platform for personal training businesses
What we found: Trainerize explicitly states it is not HIPAA compliant and will not sign Business Associate Agreements. Yet the platform collects health metrics, body composition data, injury history, and nutritional information that would qualify as protected health information in a medical context. A nutritionist using Trainerize to track a client's eating disorder recovery is storing clinical-grade health data on a platform that refuses healthcare-level protections.
What they claim: Trainerize describes data use as limited to service delivery on behalf of trainers
What we found: ABC Fitness Solutions uses de-identified and anonymised data for AI development and analytics. The platform collects workout patterns, body measurements, nutritional data, and progress trajectories from 400,000+ trainers' clients. This aggregated health dataset — built from millions of users who think they're sharing data with their personal trainer — feeds ABC's AI products. Users consented to share data with "Coach Sarah." They are training ABC's algorithms.
What they claim: Trainerize states it processes health data "solely on behalf of" the trainer or gym who is the data controller
What we found: Trainerize's own terms state it "cannot and does not guarantee any confidentiality with respect to your Content whatsoever." The platform pushes privacy responsibility to individual trainers — most of whom are solo influencers with no legal team, no DPO, no incident response plan, and no understanding of data protection law. When a user shares body measurements, progress photos, and health data through "Bella Rahbek Fitness," they think Bella has their data. ABC Fitness Solutions has their data.
What they claim: White-label Trainerize apps appear as independent products from individual trainers
What we found: Trainerize apps appear in app stores under the trainer's brand — "Bella Rahbek Fitness," "Jeff Nippard Training," etc. — with no visible indication that they are powered by the same platform. Users searching the app store see the influencer's name and photo, not "ABC Fitness Solutions." The data safety labels on Google Play list the individual trainer as the developer, further obscuring who actually controls the data infrastructure.