[rlaabs]

According to a security researcher[1], a 0-day in Analyticsd allowed any installed app to access the users health data.

[1] https://habr.com/en/post/579714/

EDIT: Found the link to the previous HN discussion about this: https://news.ycombinator.com/item?id=28637276

[propogandist]

the health and PII data making its way to log data may give Apple legal cover to ingest the data "accidentally", also.

Recall that Google got to claim their street view cars wardriving was unintentional, and just paid $13M to make it go away, after using the data for about a decade [1]

https://www.cnn.com/2019/07/22/tech/google-street-view-priva...