Skip to main content
Back to all postsPrivacy

Privacy on Dating Apps: What Grindr Actually Knows About You

A deep dive into the data that gay dating apps collect, store, and share — and why a privacy-first approach matters more than ever for LGBTQ+ users.

RUSH Team6 min read
#privacy#security#grindr#dating-apps
Privacy on Dating Apps: What Grindr Actually Knows About You

When you open a dating app, you're not just sharing your photos and location. You're handing over some of the most sensitive data imaginable — your sexual orientation, your HIV status, your precise location at any given moment, and a detailed map of your desires. For LGBTQ+ users, this isn't just a privacy concern. In many parts of the world, it's a matter of safety.

The Data Collection Machine

Let's start with what Grindr actually collects. According to their own privacy policy, the moment you interact with their platform — before you even create an account — data collection begins. Here's what they're gathering:

Information you provide:

  • Name, email, phone number
  • Photos (including metadata)
  • Sexual orientation and gender identity
  • HIV status and last test date
  • Whether you're on PrEP
  • Relationship status and what you're looking for
  • Ethnicity, body type, and physical attributes
  • Your bio and any messages you send

Information collected automatically:

  • Precise GPS location (often within meters)
  • Device information and advertising IDs
  • Usage patterns — when you're online, how long you browse, who you view
  • Network information and IP addresses

Mozilla's Privacy Not Included project rates Grindr with a prominent warning, noting that the app collects significantly more data than necessary to provide its core service.

The Sharing Problem

Collecting data is one thing. What happens next is where things get troubling.

In 2018, researchers discovered that Grindr was sharing users' HIV status with third-party companies Apptimize and Localytics. This wasn't anonymized data — it was linked to users' GPS locations and device IDs, making individuals potentially identifiable.

The fallout was severe. Norway's Data Protection Authority fined Grindr approximately €6.5 million for sharing personal data (including GPS location, IP address, advertising ID, age, and gender) with advertising partners without valid consent. The UK's Information Commissioner's Office issued a formal reprimand in 2022.

A 2024 class action lawsuit in the UK alleges that Grindr shared users' HIV status data with advertising companies, a breach that could have profound implications for users in countries where HIV status carries significant stigma or legal consequences.

Location: The Most Dangerous Data Point

For LGBTQ+ individuals, location data carries unique risks. Studies have demonstrated that Grindr's trilateration features — which show how far away other users are — can be exploited to pinpoint someone's exact location.

In 2014, researchers at Kyoto University showed they could identify users' locations within 100 meters. Similar vulnerabilities have been documented in Hornet, Jack'd, and other apps. While companies have implemented various fixes, the fundamental tension remains: the apps need location data to work, but that same data creates risk.

This isn't theoretical. Reports from Egypt, Russia, and other countries have documented authorities and vigilantes using dating apps to locate, entrap, and persecute LGBTQ+ individuals. In 2018, Grindr began warning users in 130 countries about these risks — an implicit acknowledgment that the app's core functionality could endanger its users.

The Enshittification Factor

Recent changes have made privacy concerns even more acute. As Grindr has pursued aggressive monetization strategies, the free experience has become laden with advertising — and ads require data. The more precisely an advertiser can target you, the more valuable your attention becomes.

This creates a perverse incentive structure. Your intimate data — your desires, your location, your health status — becomes a product to be monetized. Every time you open the app, you're not just looking for connection. You're generating value for a company that may not have your best interests at heart.

What Privacy-First Actually Looks Like

A genuinely privacy-focused dating app should operate on fundamentally different principles:

Minimal data collection: Only gather what's absolutely necessary for the app to function. If a feature requires invasive data collection, question whether that feature should exist.

No advertising-based business model: When ads fund an app, users become the product. Subscription models, while sometimes criticized, align the company's interests with users' interests.

Location obfuscation: Show approximate distance rather than enabling trilateration. Never share precise coordinates with other users or third parties.

End-to-end encryption: Messages should be readable only by the sender and recipient — not the company, not advertisers, not governments.

Transparent data practices: Users should know exactly what data exists about them and have genuine control over its use and deletion.

No health data fields: While options to share HIV status emerged from community safety concerns, centralizing this data creates risk. There are better ways to facilitate these conversations that don't involve permanent records in corporate databases.

The Trust Equation

Here's the uncomfortable truth: every dating app asks for an enormous amount of trust. You're revealing intimate details about yourself to a corporation whose primary obligation is to its shareholders.

When that corporation has been fined millions for privacy violations, has been caught sharing HIV data with advertisers, and operates a business model predicated on maximizing engagement and advertising revenue, that trust becomes difficult to justify.

LGBTQ+ users deserve better. We deserve apps built by and for our community, with privacy as a foundational principle rather than an afterthought. We deserve to know that our data won't be weaponized against us — by advertisers, by governments, or by anyone else.

Moving Forward

The first step is awareness. Understanding what data you're sharing, and with whom, empowers better decisions. Review the privacy settings on any apps you use. Consider what information is truly necessary to share.

The second step is demanding better. The market for gay dating apps has been dominated by a handful of players for years, but that's beginning to change. New entrants with different values and different business models are emerging. Support the ones that prioritize your privacy.

Because in a world where being queer can still carry real consequences — social, professional, legal, or worse — the apps we use to find community and connection should be protecting us, not putting us at risk.


At RUSH, we're building a dating experience that treats your privacy as sacred. No ads. No data sales. Just connection. Learn more about our privacy-first approach.

Like this article?

RUSH opens by invite first. Leave your email for new writing and early access updates.

Join waitlist