Your Dating App and Your Data: What the £26M Grindr Settlement Means for Gay Men

What the settlement covers

London firm Austen Hays issued the High Court claim in April 2024 and Grindr was served in April 2025, per reporting by Infosecurity Magazine and The Register. The claim covered free-app users from 2016 to 2020 and alleged sensitive personal data was shared with third parties without adequate consent. Payment is due in two parts: £13 million by December 31, 2026 and £13 million by March 31, 2027. Two facts matter: the settlement includes no findings and no admission of liability, and the practices at issue are historical, dating to before 2020 under prior ownership.

What dating apps collect

Every dating app collects the basics: name, age, photos, location. Beyond that, the data gets personal fast.

• Health and identity fields. HIV status, test dates, PrEP use, and sexual orientation are common on gay dating apps. All optional; anything optional can be left blank.
• Precise location. Some apps track it continuously while running. Movement patterns reveal more than any single location.
• Behavioral data. Who you view, message, and linger on builds a detailed picture of your preferences.
• Device identifiers. Advertising IDs, device model, IP address: the keys linking data from different apps to one person.
• Messages and media. Conversations, voice notes, photos, and linked social accounts. Many apps store these on their servers.

An app needs some of this to function; the question is what happens to it after.

Where your data can go

In April 2018, Norwegian research group SINTEF found Grindr was sending users' HIV status and last test dates to two app-optimization companies, Apptimize and Localytics. Grindr said it would stop the practice and insisted it had never sold personal user information. That finding is almost a decade old, but the recipient categories still apply across the industry.

• Analytics vendors. Companies measuring crashes and usage; the SINTEF case is the famous example of sensitive fields ending up here.
• Advertising networks. Free apps are funded by ads, and ad networks get identifiers for targeting. The UK's Information Commissioner has reprimanded Grindr over disclosure of its ad partnerships.
• Data brokers. A wholesale market in behavioral and location data exists; regulators in several countries have fined or warned companies over app location data.
• New owners. When a company is sold, its database is part of the deal. Your data is governed by whoever owns the company tomorrow.
• Law enforcement. Apps receive legal requests for user data; a privacy policy should explain how they handle them.

The apps themselves can be the scam: a September 2026 Anthropic threat report described a studio running more than 20 dating apps with thousands of AI personas, with gig workers handling live video calls.

Privacy steps that actually matter

You cannot control a company's business model, but you can control what you hand it.

• Treat health fields as optional. You do not owe any app your HIV status; many men discuss health in conversation instead of profile fields.
• Tighten location access. Use "while using the app" instead of "always," and approximate location in your own neighborhood.
• Reset your advertising identifier. On iPhone and Android you can reset or delete the ad ID; it breaks the link between old profile data and new tracking.
• Assume screenshots exist. No app can stop another person from screenshotting your profile or messages, so keep identifying details out of chat.
• Read the policy for three things: deletion, retention, and sale. Can you actually delete your data, how long is it kept, and does the company say it does not sell data?
• Delete, do not just log out. Delete the account through the app's process, then confirm by email that your data is deleted, not merely deactivated.

What this means for Lucid

Lucid is still pre-launch, so judge any company by what it ships. Lucid's stated position, on its public pages, is that it does not sell user data. As the app launches, that position needs to show up in the product: in the policy, the settings, and what it collects.

When you are ready to meet people who share your interests, create your free account at FindLucid.com: https://findlucid.com/signup.