一句话：对 35 款经期追踪应用进行流量与静态分析，揭示其收集敏感数据并可能与第三方共享的隐私风险。
美国最高法院于 2022 年推翻 Roe v. Wade 后，堕胎在越来越多州被禁止。经期追踪应用存储的健康数据可用于推断用户是否曾堕胎或正考虑堕胎，用户担心这些数据被披露并用于起诉。本文首次在后 Roe v. Wade 时代对经期追踪应用进行系统性隐私分析。作者从 Google Play 收集 35 款流行应用，通过流量分析和静态分析检测其收集的敏感用户数据，进而审查隐私政策并检查其与应用行为的一致性，同时分析应用评论以理解用户担忧。研究发现，部分经期追踪应用确实收集了敏感信息，并有可能将数据分享给第三方当局。作者呼吁这些应用尽快采取措施保护用户隐私，并提醒移动用户特别关注其使用的此类应用。
To help people manage their health, period tracking apps have become very popular in recent years. However, the U.S. Supreme Court overturned Roe v. Wade on June 24, 2022. Abortion will be banned in more and more states. Since the health data stored in the period tracking apps can be used to infer whether the user has had or is considering an abortion, mobile users are worrying that these apps may disclose their sensitive information, which can be used to prosecute users. Although period tracking apps have received attention from the research community, no existing work has performed a systematic privacy analysis of these apps, especially in the Post-Roe v. Wade era. To fill the void, this paper presents a comprehensive privacy analysis of popular period tracking apps. We first collect 35 popular period tracking apps from Google Play. Then, we analyze the sensitive user data collected by the period tracking apps using traffic analysis and static analysis. Further we inspect their privacy policies and check the consistency of the privacy policy with the app’s behavior. In addition, we analyze the app reviews to understand the users’ concerns about the period tracking apps. Our study reveals that some period tracking apps have indeed collected sensitive information and have the potential to share the data with third-party authorities. It is urgent for these apps to take action to protect user privacy, and mobile users should pay special attention to this kind of apps they used.