Data Report Card · Oura
Oura Data Report Card
B
9/12 Policy grade · Oura Ring · health wearable
Reviewed Jun 2026 · some cells re-verified 9 Aug 2026 · policies are checked weekly for changes · stated — every cell is read from Oura's published policy; none has been tested (run by us) yet.
2Accessstated
Self-serve: any user can log in to the Membership Hub and export their raw biometric history — even without an active subscription — at no fee.
Oura Member Care — Export & Share Your Oura Data · accessed Jun 2026 ↗1Portabilitystated
Export is a
Oura Member Care — Export & Share Your Oura Data · accessed Jun 2026 ↗.csv of raw biometric data that meets GDPR portability requirements — machine-readable, but a single flat format (a separate developer API also exists).Connects to apps: Yes. Oura's API v2 lets you authorize an app via OAuth2 to read your own sleep, activity, readiness and personal data across eight scopes, returning a refresh token to renew access; personal access tokens were retired in December 2025 in favor of OAuth. Oura — API v2 Authentication · accessed Jun 2026 ↗
1Frictionstated
Self-serve via the web Membership Hub, but asynchronous — you receive a reminder email to download the export from the Hub once it is ready.
Oura Member Care — Export & Share Your Oura Data · accessed Jun 2026 ↗2Deletionstated
Self-serve "Permanently delete your data" in the Membership Hub; the ring is factory-reset and you get email confirmation. Deletion is all-or-nothing — no way to delete specific records short of wiping the account.
Mozilla Foundation — Oura Ring privacy review · accessed Jun 2026 ↗2Sells / sharesstated
"Oura does not sell or rent personal information"; it shares data only with service providers, for user-directed sharing (doctor/coach), and as aggregated or de-identified data for research.
Oura Privacy Policy · accessed Jun 2026 ↗1Trains AIstated
Oura's own privacy policy states it "may collect and use personal data to develop, test, improve, and support Oura's own AI, machine learning, and large language model-powered features." It separately states "We do not sell personal data for the purpose of training third party Large Language Models" — but first-party training by default is what sets this score, not third-party restraint. Note: the published policy documents no opt-out for first-party training, and this cell was previously scored 2 on the strength of press coverage about on-device processing rather than the company's own published policy.
Oura — Privacy Policy · accessed 9 Aug 2026 ↗Source-verified Jun 2026 from Oura's own support and policy pages plus Mozilla's independent privacy review. All cells are "stated"; no cell has yet been "tested" via a live export or deletion.
Events
Breaches, policy changes, and export-format changes we’ve recorded at Oura — other parties’ actions, alongside the enforcement record above. An event never changes a grade by itself. All events →
No events on record for Oura.
Grade history
Every change to this company’s grade since it was first published, and why. All grade changes →
9 Aug 2026Trains AI on your data2→1score
The previous grade rested on press coverage about on-device processing. Oura's own privacy policy states it may use personal data to develop and support its own AI and machine-learning features, and documents no opt-out for that use. Data practices 10/12 → 9/12.
Oura — Privacy Policy ↗Previously: Axios — Oura's AI plan keeps health data local
How to request your data from Oura
- Go to https://cloud.ouraring.com/ — Oura's data-request entry point.
- Membership Hub → Export your data.
- Expected wait: emailed when the export is ready; download from the Membership Hub — Oura's stated turnaround (we haven't independently timed a request yet).
- No self-serve option, or want a formal request? Contact Oura — Privacy Team: mailto:privacy@ouraring.com.
These steps reflect Oura's documented process as of Jun 2026. The wait time is the company's stated figure, not yet independently measured by us.