Consumer Health Data Privacy Policy
40 of 47 blocks carry cards. 27 cards.
Eight Sleep Consumer Health Data Privacy Policy
Effective Date: August 25, 2026
- This policy covers state-law Consumer Health Data Legal Rights & Agreement Rules
This Consumer Health Data Privacy Policy (“Policy”) applies solely to personal information defined as “Consumer Health Data” subject to the Washington My Health My Data Act (“MHMDA”), the Nevada Health Data Privacy Act (“NHDPA”), or other applicable state consumer health privacy laws. This Policy supplements the Eight Sleep, Inc. (“Eight Sleep”) Privacy Policy and any other privacy policies applicable to our products.
- This policy covers state-law Consumer Health Data Legal Rights & Agreement Rules
- Health-data practices depend on your use of the products Data Access & Collection
- You may request access and information about collection or disclosure Legal Rights & Agreement Rules
What does this Policy cover?
This Policy describes what Consumer Health Data we collect, how we collect and use it, who we disclose it to and why, and the choices you may have regarding our use or disclosure of your Consumer Health Data.
When we say “Consumer Health Data” in this Policy, we mean personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status, as defined by the MHMDA and the NHDPA. Consumer Health Data does not include, among other things, data that cannot reasonably be used to infer information about, or otherwise be linked to, an identified or identifiable individual, or a device linked to such an individual, or other deidentified information. To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.
- Consumer Health Data means identifiable health-status information Data Access & Collection
- Deidentified information stays deidentified, subject to a legal exception Use & Processing
- Health-data practices depend on your use of the products Data Access & Collection
How do we collect, use, and disclose Consumer Health Data?
To provide our products or features, we collect and process information about you, including information that may be considered Consumer Health Data. The best way to learn about the types of information we collect and how we use them is to review the Eight Sleep Privacy Policy and other privacy policies applicable to our products.
- Health-data practices depend on your use of the products Data Access & Collection
For those covered by this Policy, the table below provides a summary of our practices in relation to Consumer Health Data, to the extent personal information we collect about you is considered Consumer Health Data. In each case, our practices depend on how you interact with Eight Sleep and our products, and the information that you choose to share with us (as in many instances, providing your Consumer Health Data to us is voluntary).
- Health-data practices depend on your use of the products Data Access & Collection
- Data may include biological details and health conditions Data Access & Collection
- Possible data categories include sexual health and precise location Data Access & Collection
- Health data can come from you, your activity and your devices Data Access & Collection
- Health data supports product personalization, safety and communication Use & Processing
- Health metrics may be used in personalized marketing communications Use & Processing
- Health data may be disclosed to apps and integrations Sharing & Disclosure
Categories of Consumer Health Data that we may collect: Categories of sources of Consumer Health Data: Purposes for which we may collect, use and disclose Consumer Health Data: Categories of parties with whom Consumer Health Data may be disclosed include:
- Health data may be disclosed to apps and integrations Sharing & Disclosure
- A change of ownership or control may involve health-data disclosure Sharing & Disclosure
- Providers may process health data to send reports and other messages Sharing & Disclosure
- Law enforcement or others may receive health data for legal or harm-prevention reasons Sharing & Disclosure
- Partner invitations authorize sharing with linked account users Sharing & Disclosure
- Other third parties may receive health data with consent or authorization Sharing & Disclosure
We may collect or receive the following categories of personal information which may be considered Consumer Health Data. Not all categories will be collected or received for every individual.
- Data may include biological details and health conditions Data Access & Collection
- Data may include interventions and bodily measurements Data Access & Collection
- Clinical data may include lab and blood-test results Data Access & Collection
- Possible data categories include sexual health and precise location Data Access & Collection
- The data categories also include inferred or derived health information Inference & Profiling
- Biological information, including biological sex, height, and weight;
- Data may include biological details and health conditions Data Access & Collection
- Information that identifies health conditions, including sleep conditions, status, treatment, symptoms, diseases, diagnoses, surgeries, procedures, and medications;
- Data may include biological details and health conditions Data Access & Collection
- Information that identifies social, psychological, behavioral, and medical interventions;
- Data may include interventions and bodily measurements Data Access & Collection
- Measurements of bodily functions, vital signs, or similar characteristics identifying health status, including heart rate;
- Data may include interventions and bodily measurements Data Access & Collection
- Information identifying diagnoses or diagnostic testing, treatment, or medication, including laboratory and blood panel test results accessed through third-party health record platforms;
- Clinical data may include lab and blood-test results Data Access & Collection
- Reproductive or sexual health information;
- Possible data categories include sexual health and precise location Data Access & Collection
- Precise location information; and
- Possible data categories include sexual health and precise location Data Access & Collection
- Other health information, including information that may be used to infer or that is derived data related to the above.
- The data categories also include inferred or derived health information Inference & Profiling
- You (including from information from your activity with our products or that you provide directly to us (i.e., through the optional onboarding questionnaire));
- Health data can come from you, your activity and your devices Data Access & Collection
- Your device(s); and
- Health data can come from you, your activity and your devices Data Access & Collection
- Partners, service providers, contractors, and other third parties, including third-party integrations such as Apple Health, Google Health Connect, and third-party health record connectivity platforms such as HealthEx, through which you may authorize Eight Sleep to access clinical health records from your healthcare providers, as described further in the Eight Sleep Privacy Policy.
- Clinical data may include lab and blood-test results Data Access & Collection
- Integrations and other third parties can supply health data Data Access & Collection
We collect, use, and disclose Consumer Health Data for the purposes described in our Privacy Notice and as reasonably necessary to provide you with the products and services you have requested. This may include:
- Health data supports product personalization, safety and communication Use & Processing
- Health metrics may be used in personalized marketing communications Use & Processing
- Health data may be processed to meet legal obligations Legal Rights & Agreement Rules
- Research includes trend analysis; health-model work requires separate consent Use & Processing
- Providing and personalizing our products and services, including powering autopilot features;
- Enhancing the safety and security of our products;
- Marketing and advertising certain features that may be of interest to you, including sending you personalized communications containing your sleep and health metrics (such as daily or monthly sleep reports);
- Health metrics may be used in personalized marketing communications Use & Processing
- Communicating with you and responding to your inquiries;
- Complying with applicable legal obligations; and
- Health data may be processed to meet legal obligations Legal Rights & Agreement Rules
- Research and development, including analyzing and measuring trends, conducting aggregate analysis to inform future product development, and, with your separate consent, using pseudonymized health and sleep data to improve Eight Sleep's health models and develop new features, including health condition analysis.
We may also collect, use, and disclose Consumer Health Data for other purposes with your consent or authorization or as otherwise permitted by law.
- Apps, websites, and third-party integrations on or using our products, such as Apple Health, Google Health Connect, and HealthEx;
- Health data may be disclosed to apps and integrations Sharing & Disclosure
- New owners in the event of a change of ownership or control of all or part of our products or their assets changes;
- A change of ownership or control may involve health-data disclosure Sharing & Disclosure
- Partners, service providers, contractors, and other third parties, as described in the Company Privacy Policy and privacy; policies of our product, including email service providers who process your Consumer Health Data on our behalf to deliver personalized sleep reports and other health-related communications to you;
- Providers may process health data to send reports and other messages Sharing & Disclosure
- Law enforcement or other third parties in connection with legal requests, to comply with applicable law or to prevent harm; and
- Linked account users (such as a partner or household member) who you have invited to share your Pod, as described in the Eight Sleep Privacy Policy. This sharing occurs at your direction and with your consent when you send or accept a partner invitation.
- Partner invitations authorize sharing with linked account users Sharing & Disclosure
- Other third parties, with your consent or authorization.
- Other third parties may receive health data with consent or authorization Sharing & Disclosure
How do you exercise your rights regarding Consumer Health Data?
Depending on where you live and subject to certain exceptions, you may have certain rights related to your Consumer Health Data. This includes the right to (1) request that we confirm whether we are collecting or disclosing your Consumer Health Data (and to whom); (2) request access to your Consumer Health Data; (3) confirm whether we have disclosed or sold your Consumer Health Data; (4) request the deletion of your Consumer Health Data; and (5) request withdrawal of your consent or authorization relating to such data, including the collection and sharing of your Consumer Health Data.
- You may request access and information about collection or disclosure Legal Rights & Agreement Rules
- You may request deletion or withdrawal of consent Account & Service Control
To ensure the security of your account and your data, we will need to authenticate your request prior to processing it. Please allow up to 45 days for a response. If we deny your request, you may appeal that denial by following the instructions below. If your appeal is unsuccessful, you can file a complaint with the relevant government body in your state, including:
- You may request access and information about collection or disclosure Legal Rights & Agreement Rules
- You may request deletion or withdrawal of consent Account & Service Control
- Email privacy@eightsleep.com for rights requests or policy questions Account & Service Control
- A denied request can be appealed, then raised with a state authority Legal Rights & Agreement Rules
- Washington State Attorney General at https://www.atg.wa.gov/file-complaint.
- A denied request can be appealed, then raised with a state authority Legal Rights & Agreement Rules
- Nevada State Attorney General at https://ag.nv.gov/Complaints/CSU_Complaints___FAQ/.
- A denied request can be appealed, then raised with a state authority Legal Rights & Agreement Rules
To submit a request to exercise your rights, and as applicable, to appeal a consumer rights action, please contact us using the information provided below.
- Email privacy@eightsleep.com for rights requests or policy questions Account & Service Control
- A denied request can be appealed, then raised with a state authority Legal Rights & Agreement Rules
Material changes to this policy
We will make commercially reasonable efforts to notify you before we make material changes to this Policy. Please check this Policy periodically for updates.
- Eight Sleep promises reasonable efforts to notify you of material changes Legal Rights & Agreement Rules
Contact
If you have additional questions about this Policy, please contact us at:
- Email privacy@eightsleep.com for rights requests or policy questions Account & Service Control
Eight Sleep, Inc. Email: privacy@eightsleep.com
- Email privacy@eightsleep.com for rights requests or policy questions Account & Service Control
- A denied request can be appealed, then raised with a state authority Legal Rights & Agreement Rules