alt.hn

7/13/2026 at 8:01:43 PM

Samsung Health app threatens data deletion if users opt out AI training

 https://neow.in/cWsyMTV3

by bundie

7/13/2026 at 9:20:04 PM

> The company plans to grab four categories: your sleep, your medications, your medical records, and your cycle tracking details

So you buy a device but you can't effectively use half of its features because you'd also have to agree to send them your medical records? Ok then if I refuse, will they refund 50% of the device price since now it's not usable any more?

by rdtsc

7/13/2026 at 9:32:27 PM

If your in EU, you contact the local EU consumer group where you buy the device.

https://www.europe-consommateurs.eu/en/who-we-are/about-us/e...

And file a complaint... As that breaches a dozen or more EU laws. If a lot of people do it in all the countries, it becomes a national issue.

That is the only way you fix things, and yes, we have had multiple successes with companies taking the piss. Even Samsung can not escape as their have officies in the EU and sell products there.

For the folks outside the EU, ... Its a harder fight and you need to look up your local agencies.

by benjiro29

7/14/2026 at 1:18:06 PM

How about people just stop buying this crap instead? I've never owned a Samsung and I never will.

People need to step out of this abusive relationship instead of trying to improve it. You will never be happy with a device you don't own.

by Levitating

7/14/2026 at 10:47:12 PM

Really quick that leads to not being able to buy anything though.

Sony has done a bunch of evil things (deleting paid media, hiding rootkits in music CDs). Apple abuses their monopoly to force using their web browser and extort a 30% cut of all purchases. Every car manufacturer is tracking every car they sell and selling that data. Retailers are tracking store visits using everything from face recognition to MAC addresses on cell phones.

Boycotting can only do so much. We need regulations to protect people and steep fines for violating them.

by alyeska

7/15/2026 at 3:21:43 PM

It's not about boycotting or regulations. Just don't buy products you don't get to own, it's not that hard.

I've never owned a Sony (other than a headset) or Apple product either. I am doing fine.

by Levitating

7/14/2026 at 9:06:46 PM

point me to some mature, effective options and I'd consider it.

now that you've done that, which ones are cheap, cuz most people are broke af

by red-iron-pine

7/15/2026 at 3:14:38 PM

FairPhone, Nothing Phone, Jolla, Motorola, Google Pixel.

If you're broke you shouldn't touch Samsung anyway. Better off buying a Xiaomi and unlocking it.

by Levitating

7/13/2026 at 10:34:01 PM

I had a ~2008 vintage Samsung phone with a fingerprint sensor that gave your blood oxygen level (SpO2). One day it told me something similar, I had to agree to send them data or I couldn’t use it. So I never used it again, but yeah they have been abusing their costumers a long time.

This is they same company whose tvs take pictures of what you are watching and send them back to Samsung.

by andy99

7/13/2026 at 11:05:25 PM

Every TV does that unfortunately. It's called automatic content recognition but every manufacturer has a different euphemism for it.

It's definitely not just Samsung. As bad as this is. The problem is bigger than just them.

by wolvoleo

7/14/2026 at 2:38:05 AM

Every TV might do this, not every single one does. Buy TVs which allow you to opt out (at least in one case it was several opt-ins, no opt out per SE).

by subscribed

7/14/2026 at 10:54:36 PM

I don't really want to ask for permission to be excused from this vile monitoring. I don't want it to be in there at all. But I'm not aware of any brand which doesn't do this.

by wolvoleo

7/15/2026 at 9:55:56 AM

I’ve got 2 Sceptre “dumb” TVs.

by jdmarble

7/15/2026 at 8:12:49 PM

Thanks, never heard of that brand but I'll have a look.

by wolvoleo

7/14/2026 at 3:28:49 AM

I have a projector that I just leave off the network. Do TVs require a network connection now? What happens when they don't have one?

by imoverclocked

7/14/2026 at 4:04:46 AM

At the moment usually just a nag popup on power on.

Annoying but not a huge deal. I imagine this will slowly get worse as more people learn to not connect it to WiFi.

Also of course all the smart tv features don’t work, and a lot more folks than I ever imagined actually use the built in controller (usually some form of Android or Roku) to watch Netflix and whatnot. And a lot of folks actually do watch the built in TV “channels” a lot of vendors ship with.

It seems very few people buy an additional device like an Apple TV or Nvidia Shield.

by phil21

7/14/2026 at 10:56:15 PM

I heard on another forum that the latest Samsungs just don't progress through the setup wizard without internet. And someone noticed they retain WiFi passwords even after a factory reset.

You can still set up a temporary WiFi and just kill it after but it's getting pretty insane now.

by wolvoleo

7/13/2026 at 11:58:06 PM

ah so thats where microsoft got the idea for recall from.

by globalnode

7/14/2026 at 9:00:48 AM

How is Recall doing these days?

by nicce

7/14/2026 at 4:00:34 AM

At least yours still works, they took out the ability to use the sensor on my s5 some years ago... one random app upgrade and they just decided nope.

by nubinetwork

7/14/2026 at 9:21:51 AM

I can't wait for self-hosting to become the norm and companies to not have the option to do this anymore

by onel

7/13/2026 at 11:42:41 PM

Buying a device doesn't mean vendor-hosted services are included, unless explicitly stated. This is the kind of thing why they can get away with taking unsolicited actions on people's devices whenever they want. CUT THAT CORD!

by skeledrew

7/13/2026 at 9:25:31 PM

[flagged]

by sam1r

7/13/2026 at 9:46:25 PM

> I really feel like "grab" is quite condescending

By all means, let's use a more appropriate term, like "abuse" or "misappropriate". It's not sufficiently condescending for a company that's trying to train AI on people's private health data.

by JoshTriplett

7/13/2026 at 9:57:15 PM

Do you think those services are “free”? If you want cloud storage and syncing, it comes at a price. If you’re not paying with money, you’re paying with your privacy and freedom.

by mcmcmc

7/14/2026 at 1:16:39 AM

I think syncing kilobytes costs next to nothing and if they can't manage it then let me put in my own URL and I'll host it myself.

(And "my own URL" realistically includes Google and Dropbox and OneDrive and iCloud, not just nerd stuff. And even without automatic backups it should hold on to everything and give me an export button.)

by Dylan16807

7/13/2026 at 10:10:20 PM

I sorta assumed they were making money from selling you the device.

by aftbit

7/13/2026 at 10:13:45 PM

We are not required to permit every possible business model to exist. Companies are desperately trying to get their hands on every piece of data they can get to train AI, hence the abominable use of "opt out", which is already horrible even without the added bait-and-switch coercion of "or we'll make the device you already purchased worse".

"pay or consent" stunts have already been ruled illegal under the GDPR. This goes even further than that, where you don't even have the option to pay.

by JoshTriplett

7/13/2026 at 9:54:01 PM

> condescending

How can you be "condescending" to a company?

by BigTTYGothGF

7/13/2026 at 10:04:34 PM

Same way as towards a natural person, I recon?

by ben_w

7/13/2026 at 9:54:48 PM

Samsung can mitigate the harm and frustration by providing users options. Would you prefer this pathway of their way or the highway?

by Barbing

7/13/2026 at 9:29:49 PM

"snatch with their spider leg like fingers that are dripping with digestive fluid"

by customguy

7/13/2026 at 10:00:52 PM

> I really feel like "grab" is quite condescending to a company (Samsung) that provides services at scale (upon/after consent) to help you.. "be better" (simplified..), with direct customization and tailoring.

The headline as described sounds to me like they're violating GDPR by tying to force "consent" for a not-strictly-necessary-for-functionality use of health data. The European Data Protection Board has repeatedly stated that consent is (generally) not considered to be "freely given" if there is a significant detriment for refusing it or if the user has no genuine choice.

Note however that caveat: as described. There may be some more details which make this not unlawful. Also, actually deleting your data if you don't consent is the kind of thing GDPR requires.

by ben_w

7/14/2026 at 12:55:55 AM

Also, doesn't them having your medical records subject them to laws like HIPAA? I would think so even if they aren't a medical institution.

by ethin

7/13/2026 at 9:49:46 PM

Bought a Galaxy Watch 7 two years ago, the hardware is good and One UI on the watch itself is also quite good (and the last major update improved it) but Samsung Health is such a shit app. Constant ads for some "courses" or videos and things I don't care about. Downloading my personal data doesn't even work, it sends me right to the browser with an error message that I'm "not logged in correctly" and it wants access to all my pictures & videos (seems like a wrong permission prompt there but when I decline it it also fails with "we need access to all your photos & videos". Why? Just send me a download link via email or use SAF and let me pick a download location).

Thanks to this article I also noticed the UI was redesigned. At least I could keep my layout but it didn't work like it should, it added some useless cards. It also asked about new "optional" data sharing which I of course declined. There is now a notice that my data wasn't backupped to my Samsung account the last 3 days (???) and the data synchronization doesn't work, the buttons do nothing, it just says "disabled" even though everything is enabled... typical Samsung shitware. Haven't noticed anything with AI training (there is no option) but I'm also in the EU.

by sunaookami

7/13/2026 at 9:26:48 PM

Where is the catch? You rather get two good things if you don't agree:

- Samsung deletes your sensitive health data

- Samsung does not use this data to train some AI

:-)

by aleph_minus_one

7/13/2026 at 9:54:28 PM

The catch could be they actually do neither of that and train on it silently.

by orbital-decay

7/13/2026 at 9:49:28 PM

I was thinking exactly the same…

by delduca

7/13/2026 at 9:23:23 PM

In some way they are telling that they respect your privacy. Or they have your data (and then do something with it, now or later), or no one will.

They could provide some Google-style takeout to get your data before deletion, but that may not have any meaning or practical use without their devices and software.

by gmuslera

7/13/2026 at 11:47:15 PM

They don't respect your privacy, they value your private data. Two very different things.

by vitally3643

7/13/2026 at 9:27:44 PM

Completely agree. Or maybe, just like most products in tech -- they are currently en route to "take out" style data deletion... and it's being released shortly.

by sam1r

7/14/2026 at 2:42:58 AM

Well, as per GDPR they must provide data export ("takeout").

by subscribed

7/13/2026 at 9:32:15 PM

This is like Google Ultra for personal accounts. I signed up to see what it was like and then assumed I would be able to disable training on my data as a paid customer. The only way to disable training on paid personal accounts is to disable history (no chat logs) which makes the service much less useful for me.

For Google Workspace accounts that use the Ultra plan you can disable training while retaining history. I didn't bother signing up again. It is user-hostile.

by gardnr

7/13/2026 at 9:42:21 PM

Yes, you will have to pay lot of money and you will have to surrender data too.

by cute_boi

7/13/2026 at 9:30:50 PM

Yes, please - delete my health data. I want my health data - I didn't want Samsung or anyone else to have it unless I provide it. And even then, you can't keep it - you can look at it. It's mine.

by vcryan

7/13/2026 at 10:21:20 PM

You’re hoping that they will do what they say

by garbagewoman

7/13/2026 at 9:15:48 PM

shouldn't this get them turbo obliterated in europe?

by datadrivenangel

7/13/2026 at 9:20:38 PM

no, in fact gdpr requires that they get consent before they process the data.

They are not preventing people from accessing the data, only indefinite storage as i understand. They may claim that storage is needed for the processing (which might make sense, they want to train on the whole time series).

by seydor

7/13/2026 at 9:56:36 PM

Recital 11 of the GDPR says that consent must be "freely given", and recital 43 says (in part):

"Consent is presumed not to be freely given if it does not allow separate consent to be given to different personal data processing operations despite it being appropriate in the individual case, or if the performance of a contract, including the provision of a service, is dependent on the consent despite such consent not being necessary for such performance."

by ptx

7/14/2026 at 2:45:31 AM

This is coercion and change of contract post-factum.

I don't think they have any chance of surviving regulator looking at it. Of course regulators never do it unprompted.

by subscribed

7/13/2026 at 9:33:17 PM

Yes but that consent must be given freely. There can't be undue pressure. Unfortunately this part is not well defined but it looks like the AI training part is not required to deliver the service to the specific user so I do think that if challenged it will be ruled afoul of GDPR.

by wolvoleo

7/13/2026 at 9:40:24 PM

I think Facebook lost a similar lawsuit recently where you had to accept that they can use your data or pay to access the site. And it was found illegal in the EU.

The problem is that it takes years and users don't wait for years. There should be a way to harm these companies more on the EU level.

by abroszka33

7/13/2026 at 10:03:30 PM

They can get fined for up to 2 or 4% of their global annual revenue depending on the violation severity.

by antalis

7/14/2026 at 12:05:22 AM

I'm in Norway, and I never consented in that dialog box, so my Facebook account is in limbo. The dialog still appears when I go to Facebook, years later, so I don't think anything has changed?

by kivle

7/15/2026 at 2:34:38 PM

Perhaps Norway didn't get included? I know GDPR does apply to Norway, but perhaps the legal basis was in another law that didn't transfer to the EEA area?

I don't use Facebook myself anymore so I can't check.

by wolvoleo

7/13/2026 at 9:23:09 PM

Indeed, gdpr was created for corporations to have legal basis to process and sell data. Before gdpr it was a gray area. It was never about privacy.

by varispeed

7/14/2026 at 1:13:13 AM

Samsung has been banned from my choices. There are many brands to choose from.

by germandiago

7/13/2026 at 9:17:36 PM

Something I appreciate about Samsung phones is that having a Samsung account is completely optional. I've never had one. If I accidentally click on one of the dumb AI features I'm not even allowed to use it without an account.

by gdulli

7/14/2026 at 1:11:15 AM

I use Sparky Fitness for all my fitness / health tracking. So, so happy I have everything stored locally, where I can do whatever I want with the data, and I know it's mine and it's private. Very easily to interface with your favorite llm of choice. https://github.com/CodeWithCJ/SparkyFitness/

by aizk

7/14/2026 at 2:41:54 AM

Ummm once you give your data to an LLM it's no longer private.

by SoftTalker

7/14/2026 at 3:28:05 AM

Gave the repo a once over: Self hosting [of the whole application in general] is a first-class citizen of the project, and the AI features are both:

a. completely optional/disable-able and

b. Self hosted llm friendly, with specific instructions given on how to use it with things like Ollama

by SirMadam

7/13/2026 at 9:48:21 PM

One day we will perhaps be able to forgive these companies for mismanaging our data, but we will never forgive them for making us regulate them.

by kklisura

7/13/2026 at 11:11:52 PM

Gemini does the same (though not with health data). The only way to opt out of training on your data is to disable all Gemini chat history.

by makeramen

7/14/2026 at 7:56:15 AM

If I'm not mistaken you can still use all of Gemini features, without saving history, without training?

by subscribed

7/13/2026 at 9:21:48 PM

I was under the assumption that because of GDPR (which is in effect..).. or current "end-user metadata storage" best practices.. if you (a website/or app) didn't immediately disclose to the user what data is being used,stored, and why it is -- then you shouldn't store it at all.

If you agree that the world needs better examples today, then Samsung has definitely showed one.

by sam1r

7/13/2026 at 9:45:44 PM

GDPR is dead in the water.

by Citizen_Lame

7/13/2026 at 10:59:34 PM

I use a Watch 6 Classic, just went in to find this toggle. Doesn't seem to exist in the Japanese market at least.

by qmarchi

7/14/2026 at 12:47:46 PM

I've always loved Samsung Magician (for drives), whose Windows installer always asks something to the effect of "Do you happen to live in Brazil or the EU by any chance?"

by kmfrk

7/14/2026 at 6:56:11 AM

Wow. Good thing I sent back my Samsung health watch after discovering some of the fancy features were locked to having a Samsung smartphone to go with it.

Shameful business conduct.

by eqvinox

7/14/2026 at 2:59:49 AM

The endearing angle: refusing to keep cookies in the house, because you admit an inability to merely store them.

by chrismartin

7/14/2026 at 2:15:45 AM

your step count is now a training data point. next they'll hold your resting heart rate hostage until you agree to let the AI analyze your grocery receipts.

by luciana1u

7/14/2026 at 3:41:07 PM

At least your account still works.

by Yatharth__verma

7/14/2026 at 12:25:45 AM

I mean, Gemini does the same: if you want the history of your chats, there's no way to opt out from the AI training..

by gyoridavid

7/13/2026 at 9:21:51 PM

Samsung should be fined out of existence for this.

by varispeed

7/13/2026 at 9:43:26 PM

Well there is no incentive for government to keep citizen data private.

by cute_boi

7/13/2026 at 11:26:34 PM

How does this not violate HIPAA?

by Madmallard

7/13/2026 at 11:47:50 PM

How is HIPAA relevant here? Samsung isn't a covered entity. HIPAA is not just "I have some health data" freebie. Might as well ask why it doesn't violate Sarbanes-Oxley or Jim Crow.

by arjie

7/13/2026 at 11:33:12 PM

Because HIPAA only applies to specific people and organizations who have a formal role in your health care. It is not a universal law applicable to everyone, and Samsung is not your healthcare provider, insurer, nor part of any related entity.

by codingdave

7/14/2026 at 12:07:55 AM

It probably should apply. The spirit of HIPAA is the protection of health information.

by Madmallard

7/14/2026 at 10:16:37 AM

Samsung is such an evil, dishonest, cunning company. I can’t understand how their devices sell so well despite that!

by ornornor

7/13/2026 at 9:55:10 PM

>You will not be able to sync health data with your Samsung account and your health data will be deleted unless retained pursuant to applicable law. If retention is required, we will erase it as soon as the required retention period ends.

Don't threaten me with a good time.

I'm so tired of tech companies shoving AI into everything, everywhere.

by stackghost

7/13/2026 at 9:23:56 PM

That reminds me of a story by a former coworker of mine, who had a xing account and repeatedly asked them to not send me him ads and spam e-mails. They ultimately closed his account.

Some companies are so dead set on doing this shit, that they don't even have mechanism in place that would enable them to act upon you opting out. It is a sign of dysfunctional companies. You can also observe this, when you send companies a GDPR request for deletion and they do eeeeverything to not have to go into their shitty system and delete the data, because that would require them to do manual work.

by zelphirkalt

7/13/2026 at 9:17:11 PM

You shouldn't trust them with your health data anyway.

by josefritzishere

7/15/2026 at 8:04:24 AM

[dead]

by enbarca

7/14/2026 at 12:54:16 PM

[flagged]

by nicsoftware

7/14/2026 at 1:44:36 AM

[dead]

by gentlerain

7/13/2026 at 10:05:18 PM

[dead]

by theturtle

7/13/2026 at 9:54:01 PM

[dead]

by breakingrules3

7/13/2026 at 9:52:14 PM

[dead]

by breakingrules3

7/14/2026 at 4:20:36 AM

[flagged]

by itsautocomplete

7/13/2026 at 9:47:25 PM

I'd doubt this is legal under HIPAA law in the US, but good luck

by exabrial

7/13/2026 at 9:50:02 PM

It certainly is. HIPAA binds healthcare providers and those entities who get data from them. Samsung is not bound by either of these, unless it is sourcing the health information from, like, your doctor, and not from your watch.

by fwip

7/14/2026 at 2:50:10 AM

But it should be. They are actively collecting it with software and devices designed to collect it and giving you medical advice based on it. They should be considered a provider.

by SoftTalker

7/13/2026 at 9:53:35 PM

I'm not an expert on the matter, but to my knowledge Samsung aren't health practitioners and aren't beholden to HIPAA laws for data that was (presumably) voluntarily provided to them. Is this scummy? Abso-fucking-lutely. But as far as I'm aware they have a lot of freedom when it comes with data collected with permission from users. Obviously this is something that should be addressed/regulated.

by Hugsbox

7/14/2026 at 11:50:30 AM

What a friendly move. Try to get any of those surveillance giants to delete any data they have about you. And Samsung does it voluntarily? I would take that opportunity instantly if I were a user.

by zombot

7/13/2026 at 9:37:19 PM

They are dumber than a second coat of paint.

by dotcoma

7/13/2026 at 9:41:58 PM

is this a common expression? i'm genuinely confused/curious. i am confurious.

by thejazzman

7/13/2026 at 9:51:04 PM

That sounds a little more like confused and furious. Anyone curious about why you are furious might start a chain reaction of confuriosity.

by doginasuit

7/14/2026 at 2:54:18 AM

It's a George Carlin quote.

by SoftTalker

7/14/2026 at 10:55:40 AM

The Indiana variant of this phrase was “tighter than two coats of paint” which meant a person who was tight with money (cheap).

by tatersolid

7/13/2026 at 9:19:26 PM

Am I reading this wrong? It sounds like, short of self-hosting your health data, this is the best of both worlds. Avoiding zombie data retention and avoiding AI? Where do I sign?

by kelseyfrog

7/13/2026 at 9:29:07 PM

Blocking backups and consequently reducing data portability doesn't really sound like the best of both worlds.

by ribosometronome

7/13/2026 at 9:14:19 PM

Are we sure this isn’t the text for the “consent to process health data” toggle that is on the same screen? I don’t have a Samsung phone handy to check

by swiftcoder

7/13/2026 at 11:36:29 PM

This actually seems kinda OK. Consent to train is payment for hosting that data. Find another health app/service with more preferable terms if you don't like it. My only beef is if they do an immediate delete without providing a reasonable method for users to export that data first, which is how it reads.

by skeledrew

7/14/2026 at 2:40:19 AM

> Find another health app/service with more preferable terms if you don't like it

It never ceases to amaze me how many people defend the Darth Vader style of buying a product: "I am altering the deal; pray I don't alter it any further"

I assume it must be rooted in the just-world fallacy: "Clearly anyone affected must not have been careful enough or did something else wrong. Since I'm careful with my purchases, negative consequences couldn't happen to me."

Related reading: https://blog.codinghorror.com/they-have-to-be-monsters/

by anonymars

7/14/2026 at 8:08:48 PM

Your analysis reiterates the popular but fallacious motifs. The real issue is that people don't read the contracts they sign, so when they buy something they imagine that it will do all they expect and probably more from the time they buy until it falls apart. Then they're surprised when Samsung does something permitted by the contract. Then they get annoyed because they feel entitled to something that no one agreed to.

This seems to be a major stumbling block in the popular understanding of business: contracts, agreement, consent matters.

What you might be implying with the reference to the JWF is that there should be a ceiling for retail contract complexity. I'm just guessing, it's not really clear.

by akramachamarei

7/15/2026 at 2:25:58 PM

A contract that says "we can change the terms of this contract at will" (as pretty much all "terms of service" do) is little more than an adhesive charade

Imagine thinking people who bought a device when it didn't say "in order to use the features we advertise, you must let us train our AI on your data" are the ones who are being unreasonable

by anonymars

7/13/2026 at 10:39:48 PM

I actually don’t know why people are always surprised when this happens, it’s not your data anymore no matter whatever regulations are there. The other day I reactivated my apple music to get a specific shazam song (I don’t use it anymore or any SaaS for that matter, have my navidrome server for years), but little to my surprise, all my playlists and songs are gone, deleted, everything as if it’s a new account! I thought it’s a glitch and googled it, turned out there are a LOT of people who had all their years of music wiped out for not having the subscription for two weeks only.. so yeah, always own your stuff, especially if you pay for it.

by tamimio

7/13/2026 at 9:20:06 PM

Apple has default E2EE on health data, which I respect. But they need to take iMessage backup out of Advanced Data Protection and make it default E2EE. Messages are just as sensitive, iMessage is effectively not E2EE if most users are using it with server-side encrypted backups to iCloud. Apple of all companies should be able to make a reliable E2EE that wont cause data loss.

by Cider9986