As cycle-tracking apps and connected health devices become more popular, more people are asking an important question: “Is my data safe?”
Femtech can give people unprecedented insight into their cycles, hormones, fertility, and overall health. But with that insight comes a significant responsibility: protecting some of the most sensitive and personal information a person can share.
As connected health technology continues to evolve, so must the standards used to safeguard it. Greater scrutiny across the femtech industry—including independent security research—has helped raise awareness of data privacy and encouraged companies to keep strengthening their protections.
At Mira, protecting your health data is a core value that guides how we build and develop our products. Privacy and security are considered across our devices, app, and supporting systems—not treated as an afterthought. Because cybersecurity is never “finished,” we continuously review our safeguards, identify emerging risks, and invest in making our protections stronger.
Here’s our CEO, Sylvia Kang, explaining Mira’s approach to data security and how we protect your information when you use Mira products.
A Note from Sylvia Kang, Mira’s CEO
Accessing our body’s information and feeling in control of our decisions is complex enough. Having to worry about whether our privacy could be breached makes that experience even more difficult.
On behalf of myself and the team at Mira, we want you to know that Mira is fully committed to protecting your privacy.
“We will always stand for reproductive health rights, and this is why we assure you that your health data privacy will always come first—today, tomorrow, and in the future.”
As the world and its technology continue to change, our goal is to provide our users with up-to-date privacy and security protections. This is an ongoing commitment, and we hope to ease any concerns by answering some of your most frequently asked questions below.
Working Together to Strengthen Security
Independent research can provide valuable external scrutiny of connected health technology and help companies examine their systems from different perspectives.
As part of Mira’s ongoing commitment to security, we recently reviewed observations shared responsibly by an independent research team from Northeastern University. The team examined aspects of Mira’s devices, app, and supporting systems using researcher-owned devices and accounts, then disclosed its findings directly to Mira before presenting them publicly.
We value the rigor and external perspective that responsible research provides. It helps us build on the protections already in place, consider our technology from new angles, and continue raising our security standards.
All testing was conducted using researcher-owned accounts.
How We’ve Strengthened Our Protections
Following this review, we introduced additional safeguards across our devices, app, accounts, and supporting systems. These improvements build on our existing security measures and provide further protection for Mira users and their data.
Device and account connections
Strengthened authentication and verification measures for communications between Mira devices and linked accounts.
Data validation
Enhanced backend checks designed to verify that submitted measurement data is appropriately associated with the relevant account, device, and session.
Secure communications
Improved safeguards for communications between the Mira app and Mira services, including additional protections for authentication-related information.
Account protection
Added safeguards intended to reduce the risk of repeated or automated unauthorized access attempts.
Firmware delivery
Strengthened access controls for device firmware, including authenticated and time-limited access mechanisms.
Mira and Your Data: Frequently Asked Questions
How does Mira protect my data?
Mira uses multiple layers of privacy and security safeguards to protect users and their information. These include:
- Encrypting data in transmission and using secure systems to store it.
- Limiting access to systems containing user data to authorized team members who need it to perform their roles.
- Providing internal training on cybersecurity, privacy, and the responsible handling of sensitive health information.
- Reviewing and improving protections across Mira’s devices, app, accounts, and supporting systems.
- Monitoring for emerging risks and responding when opportunities to strengthen our safeguards are identified.
Mira users can also request the permanent deletion of their accounts and associated personal information, subject to any information Mira is required or permitted to retain under applicable law. Deleting an account removes its associated data and resets the app to its default state.
Does Mira comply with health and data privacy regulations?
Yes. Mira complies with HIPAA and GDPR requirements and is committed to handling personal information responsibly and securely.
These regulations help guide how we collect, use, store, and protect personal information. You can find more information about Mira’s data practices and the rights available to you in our Privacy Policy.
If I delete my cycle-tracking apps, will that help protect my data?
It depends on the app and how the company behind it collects, uses, stores, and shares information. Before choosing a cycle-tracking or health app, it’s important to read its privacy policy and understand its business model.
Some free apps may rely on advertising or the sharing or sale of user information as part of their business model.
Mira users can request the deletion of their account and associated personal information by emailing support@miracare.com or contacting our Customer Support team via chat. Some information may be retained where required or permitted by applicable law.
What happens if Mira receives a legal request for my data?
Mira may be required to respond to valid subpoenas, court orders, or other legal processes, subject to the requirements and restrictions of applicable law.
We carefully review requests for user information and may challenge those that are invalid, overly broad, or otherwise legally objectionable. Where legally permitted and appropriate, our Customer Support team will contact the affected user and provide information about any next steps available to them.
Can I control or delete my Mira data?
Yes. You can permanently delete your Mira account directly through the Mira App by going to Profile > Delete Account. If you need assistance, you can also request account deletion by contacting our Customer Support team at support@miracare.com or via chat.
You may also request access to your personal information, subject to applicable legal requirements and exceptions. For more information about your privacy rights and how to exercise them, please see our Privacy Policy.
Our Ongoing Commitment
Your trust matters to us.
Access to information about your body should feel empowering—not create more uncertainty. That’s why Mira takes a transparent, thoughtful approach to how data is handled across our app, devices, and supporting systems.
Strong security requires continuous attention. We will keep investing in our safeguards, learning from responsible external research, and adapting our protections as technology and security standards evolve.
If you have questions about Mira’s privacy or security practices, or would like to speak to someone about your personal information, please contact us at support@miracare.com.
