Grindr urged to default privacy over profits

Grindr could be safer by default, and critics want it now.

During Pride Month, the Electronic Frontier Foundation is pressing Grindr to shift its privacy posture from a profit mindset to user safety. The group argues that Grindr should make privacy the default across its platform, stop sharing personal data with advertisers, and require opt-in consent before using private information to train artificial intelligence. The plea reflects a broader concern in the tech industry: for LGBTQ plus users, even small data leaks can have life altering consequences, from harassment to discrimination or violence.

The filing highlights two concrete changes the company should implement immediately. First, Grindr should make privacy the default. That means limiting data collection and sharing unless a user actively opts in, and ensuring sensitive attributes such as sexual orientation, gender identity, or HIV status are not exposed or used for profiling without explicit consent. Second, the group calls for opt users out of behavioral advertising by default. Today, users can opt out, but the opt-out protection is not automatically enabled in most cases, which leaves many people exposed to targeted ads and data reuse without their ongoing awareness. The EFF argues that these steps are essential because highly sensitive data can travel far beyond a user’s control once it leaves the app, and the consequences of exposure can be severe.

Grindr’s track record undercuts confidence in privacy protections. The filing notes that the app has previously shared users’ HIV status and precise location with advertisers without valid consent, drawing reprimands and fines in several jurisdictions. It also recounts internal tensions, including a lawsuit by Grindr’s former Chief Privacy Officer who alleged the company fired him for raising concerns about prioritizing profits over privacy. Grindr has since rolled back some of its more egregious data sharing practices, but advocates say more proactive changes are necessary to rebuild trust with a community that already bears disproportionate privacy risks.

For compliance officers and platform leaders, the call from EFF illustrates two critical pressure points. One is the governance hurdle: how to operationalize privacy by default without crippling the ability to monetize via ads or other services. The other is the enforcement reality: privacy rules are not just aspirational, and regulators in multiple countries have shown they will penalize data practices that fail to protect users. The mention of reprimands and fines underscores that regulators will not wait for perfect privacy programs; they will act when data handling harms users. As a result, Grindr and similar platforms should prepare for rapid policy updates, DPIAs (data protection impact assessments), and clear documentation of consent flows to satisfy a patchwork of cross border rules.

From a practitioner lens, a few concrete takeaways emerge. First, default privacy requires rethinking data minimization and the business case for any data sharing with advertisers. Even a modest drop in data revenue can be absorbed if it reduces risk and builds trust among a marginalized user base. Second, automating or simplifying opt-out for behavioral advertising by default can sharply reduce incidental data leakage, but teams must ensure transparency around what is retained and for what purposes. Third, any use of personal data for AI training needs explicit opt-in consent and clear disclosure about what data is used and for what models, with auditable records. Fourth, regulators will likely expect timely and verifiable commitments, not vague promises; thus, measurable milestones with deadlines and enforcement pathways are essential.

As Pride Month spotlights safety gaps, the case for stronger privacy defaults on Grindr becomes not just a user issue but a governance and compliance imperative for the tech industry at large.