Grindr pays £26m over claims two analytics providers received users' HIV status

HIV status and the date of a user's last test are optional profile fields on Grindr, offered to reduce stigma and help users make informed health choices ^[9]. Ethnicity and sexual orientation sit in the same profile ^[8]. The allegation is that those attributes reached Apptimize and Localytics, two data analytics services, and that a potentially unlimited number of third parties then used the data to customise advertising to users ^[11][12]. As reported, the claim describes sharing for commercial purposes rather than an intrusion ^[8][12]. The outbound path ran through vendor instrumentation that had been configured to send that data.

The arithmetic sets a ceiling on the payout, not the payout itself. £26m spread across "more than 11,000" claimants is at most about £2,364 each ^[1]. The real per-claimant figure is lower, because the BBC's account of the filing does not separate legal costs from money reaching claimants ^[16].

The timeline is the part that travels. The sharing was reported in 2018, when Grindr defended it as being in line with industry standards and then stopped sending HIV data to the two providers ^[13]. The High Court claim was filed in 2024, six years after that ^[2]. The final £13m falls due on 31 March 2027, nine years after the original disclosure ^[3]. The 2018 fix addressed the flow; the underlying exposure stayed open until this settlement.

Grindr's position is that the conduct predates 2020 and its ownership by the Chinese firm Kunlun, and that it has since overhauled its privacy practices ^[6][14]. Its filing says the company "disputes the allegations" while acknowledging "the distress and loss of trust expressed by some of its UK users regarding that pre-2020 period" ^[7]. Chaya Hanoomanjee, the lawyer who led the claim, said in April 2024 that claimants had experienced significant distress and that Grindr owed compensation to the community it serves ^[10]. The BBC report describes a class action settlement with no admission of liability and records no regulatory finding or fine ^[5][15].

So the £26m is a settlement price, fixed outside any regulatory ruling. It was set by an opt-in claimant pool and a US regulatory filing ^[3][4], and for anyone tallying what special-category attributes are worth when a vendor library can read them, it is the only public quantity attached to those flows.