Internet of Shit: AI Poop Analysis App Offered to Sell Me Database of Its Users’ Poops

A developer of the AI-powered stool analysis app PoopCheck has publicly offered a database of over 150,000 user images for sale on Reddit, raising concerns about data privacy and commercialization of sensitive health information.

The database was reportedly collected from around 25,000 users over several years, with images uploaded to the app by individuals seeking digestive health insights. The seller, identified as Ill_Car_7351, claims the images are rare and valuable for machine learning and medical research. The app, PoopCheck, advertises features such as analyzing stool consistency, color, and shape using AI, and hosts a community where users share images and discuss health concerns.

Despite claims on its App Store page that the developer does not collect data and that privacy is a core value, the app’s Terms and Conditions explicitly state that users grant the company a license to use, reproduce, modify, and sell their data, including for AI training and commercial purposes. The Terms also specify that data may be incorporated into AI models permanently, even after account deletion. The sale offer was posted by a Reddit user who indicated willingness to share a sample of the data with interested parties and provided contact details for further discussion.

Why It Matters

This incident underscores the potential privacy risks in health-related apps that collect sensitive data under the guise of privacy-focused policies. The sale of user images for AI training and commercial use raises ethical questions about consent, data security, and the exploitation of personal health information. It highlights the need for stricter regulation and transparency in how health data is handled and monetized, especially when it involves potentially identifiable or sensitive content.

Background

PoopCheck was launched several years ago by Soft All Things, a company claiming to prioritize privacy and encrypt user data. The app’s privacy policy claims that health data is protected and that users can delete their data at any time. However, the Terms of Service explicitly grant the company broad rights to use and sell user data, including for AI development. The incident follows broader concerns about health data privacy, especially as AI and machine learning become integral to health tech. The Reddit post revealing the sale of the database has sparked discussions about the gap between privacy claims and actual data practices in health apps.

“I’ve got 150k+ labeled and classified images of 💩 from roughly 25K different people. It’s valuable for ML training, cancer studies etc, but not sure how to sell it.”

— Reddit user Ill_Car_7351

“The developer does not collect any data from this app.”

— PoopCheck app description

“By uploading stool images or any health-related data to the App, you grant Soft All Things LLC a worldwide, irrevocable, perpetual, unconditional, royalty-free, fully-paid, transferable, sublicensable license to use, reproduce, modify, adapt, distribute, sell, license, and create derivative works from such content.”

— PoopCheck Terms and Conditions

What Remains Unclear

It is not yet clear how many users were aware their data could be sold or used for commercial purposes, nor whether the company has already sold or licensed the database. The full extent of data sharing and the identities of potential buyers remain undisclosed. The ethical and legal implications of this practice are still being evaluated.

What’s Next

Investigations into the company’s data practices are likely to intensify, with calls for increased transparency and possible regulatory scrutiny. The seller has indicated willingness to share a sample of the data, which may lead to further examination of the database’s contents and provenance. Industry watchdogs and privacy advocates may push for stricter controls on health app data handling.

Key Questions

Is my data safe if I use health apps like PoopCheck?

While apps may claim to prioritize privacy, their Terms of Service often grant broad rights to use and sell your data, which may include sensitive health images. Always review privacy policies carefully before sharing personal health information.

Can my stool images be sold or shared without my knowledge?

Yes, if the app’s terms grant the company rights to use and sell your data, and if you have uploaded images, they could be included in databases sold or licensed to third parties. The level of user awareness varies and is often not transparent.

What are the legal protections against the sale of health data?

Legal protections depend on jurisdiction; in some regions, health data is protected under privacy laws like HIPAA or GDPR. However, app terms often override these protections, making it essential for users to understand what they agree to.

What should developers do to protect user data?

Developers should ensure transparency about data collection and sharing practices, obtain explicit consent, and avoid broad licensing clauses that allow indefinite sale or use of personal data for commercial purposes.