Grindr has settled a major privacy lawsuit by agreeing to pay £26 million to resolve claims that it shared users’ HIV status and other sensitive information with third‑party analytics firms.
The Settlement Details
The deal, filed with the US Securities and Exchange Commission on 2 September, consists of two equal £13 million instalments. The first payment is due by 31 December this year, the second by 31 March 2027. Grindr stressed that the settlement carries no admission of liability, but the company acknowledged the distress felt by many UK users over its pre‑2020 data practices.
What Went Wrong: Data Sharing Allegations
The lawsuit, originally launched in the UK High Court in 2024 and later expanded to a US class action, accused Grindr of handing over personal data – including HIV status, ethnicity and sexual orientation – to analytics providers Apptimize and Localytics. Law firm Austen Hayes, representing more than 11 000 claimants, argued that the information was used to tailor advertisements, breaching UK privacy regulations. Chaya Hanoomanjee, the lead lawyer, said claimants had suffered “significant distress” after their private health details were disclosed without consent.
Grindr had allowed users to voluntarily display their HIV test dates as part of a stigma‑reduction initiative, but the complaint alleged that this feature was exploited for commercial gain. The controversy echoed earlier revelations from 2018, when the app was found to be sharing HIV‑related data with the same third parties. Although Grindr defended the practice as industry standard at the time, it subsequently stopped sharing HIV data with those firms.
Grindr’s Response and Future Steps
In its filing, Grindr pointed out that the disputed practices occurred before 2020, when the app was owned by Chinese conglomerate Kunlun. Since then, the company says it has “overhauled” its privacy programme to better serve the LGBTQ+ community. Grindr reiterated its commitment to transparency, user control and responsible data handling, describing itself as a safe space for its members.
The firm has also faced regulatory penalties elsewhere: a £5.5 million fine from Norway’s data protection authority and a reprimand from the UK Information Commissioner’s Office in 2022 for similar breaches.
Why it Matters
This settlement underscores the growing scrutiny of how dating apps manage intimate health data, especially within communities that rely on such platforms for connection and support. For Grindr, the financial hit is significant, but the real stakes lie in rebuilding trust and demonstrating that privacy safeguards can keep pace with innovation. The outcome may set a benchmark for other tech firms handling sensitive personal information, signalling that lapses in data stewardship will attract both legal repercussions and public backlash.