Every time you press start on your GPS watch, you generate data. Your route, your pace, your heart rate, your location — all captured, synced, and stored on servers you don't control. Add in WHOOP or Oura data, and companies also know your sleep patterns, HRV, and daily stress levels.
Most runners don't think about where this data goes. But understanding who has it — and whether you can get it back — matters more than you might think.
Where your data actually lives
Strava
When you sync a run to Strava, they store:
- GPS coordinates for every second of your run (your exact route)
- Heart rate data
- Pace, cadence, elevation
- Time of day and duration
- Device information
Strava uses this data for their core features (activity feed, segments, challenges) but also for Strava Metro — anonymized, aggregated data sold to urban planners and transportation departments. Your individual routes contribute to heat maps and traffic pattern analysis.
Data export: Strava lets you download a full export of your data (Settings → My Account → Download Your Data). You can also delete your account entirely.
API access: Strava's API lets third-party apps read your workout data (with your permission). This is how platforms like Pairform can sync your workouts automatically.
WHOOP
WHOOP stores:
- Continuous heart rate data (24/7)
- HRV readings
- Sleep data (duration, stages, quality)
- Strain scores
- Skin temperature
WHOOP has stated they use anonymized data for research and product improvement. They've published studies using aggregated member data.
Data export: WHOOP allows data export through their app (Performance → Data Export). Format is CSV.
API access: WHOOP has a developer API, though it's more limited than Strava's.
Garmin
Garmin stores the most comprehensive dataset of any running platform:
- GPS tracks
- Heart rate (resting, active, zones)
- VO2max estimates
- Training load and status
- Body Battery
- Sleep staging
- Stress scores
- Respiration rate
- Blood oxygen
Garmin's privacy policy states they don't sell personal data to third parties, though they use it for product improvement and anonymized research.
Data export: Garmin Connect lets you export individual activities as FIT files. Bulk export is available through account data export.
API access: Garmin's API requires developer access and is primarily push-based (Garmin sends data via webhooks).
Oura
Oura stores:
- Sleep data (duration, stages, timing)
- HRV (nighttime)
- Resting heart rate
- Temperature deviation
- Activity and readiness scores
- Blood oxygen
Oura uses anonymized data for research partnerships and has published studies on COVID-19 detection using ring data.
Data export: Available through the Oura web dashboard.
API access: Oura has a public API that allows authorized apps to read your data.
The fragmentation problem
The bigger issue isn't that individual companies have your data — it's that your complete fitness picture is fragmented across 3-5 different platforms, each with different export formats, different APIs, and different privacy policies.
You can't see the whole picture because the pieces live in different houses:
- Workout data in Strava
- Recovery data in WHOOP
- Sleep data in Oura
- Body composition in Withings
- Advanced metrics in Garmin
This fragmentation has real consequences:
For coaching: No single platform can give you comprehensive training advice because none of them see everything.
For data portability: If you switch from WHOOP to Oura, your historical recovery data doesn't move with you.
For privacy: You're trusting 3-5 different companies with different parts of your health data, each with their own privacy policies and data handling practices.
Taking control of your data
Option 1: Aggregate into a personal system of record
The most practical approach is bringing all your data into one platform that you control. This gives you:
- A single place to see everything
- The ability to grant AI coaches access to your complete picture
- A backup if you switch devices or platforms
Pairform was designed exactly for this. It pulls data from Strava, WHOOP, Oura, Withings, and Garmin into a single dashboard — your personal fitness system of record. The data stays accessible even if you change wearables.
Option 2: Regular data exports
If you prefer keeping data locally, set a quarterly reminder to export from each platform:
- Export from Strava (bulk data download)
- Export from WHOOP (CSV export)
- Export from Garmin Connect (activity files)
- Export from Oura (web dashboard export)
Store these in a folder you control. The downside: exports are snapshots, not live data, so they're useful for archival but not for ongoing coaching.
Option 3: Be selective about what you share
Not every app needs every permission. Review your connected apps:
- Strava: Settings → My Apps → Review which third-party apps have access
- WHOOP: App → Profile → Authorized Apps
- Garmin: Garmin Connect → Account Settings → Connected Apps
Remove apps you no longer use. Each connected app is another entity with access to your data.
What to look for in a data platform
If you're choosing a platform to aggregate your fitness data, here are the privacy features that matter:
Read-only API access: The platform should read your data from sources but not modify anything. It should never post to Strava or change your WHOOP settings.
Revocable access: You should be able to disconnect any data source instantly, and the platform should stop receiving new data immediately.
No data selling: The platform's business model should not depend on selling your health data. If the product is free and there's no clear revenue model, you're probably the product.
Clear data deletion: If you delete your account, your data should be deleted — not just deactivated.
Standard OAuth: Connections to Strava, WHOOP, etc. should use standard OAuth flows — the same secure authentication the providers themselves designed. No username/password storage.
Pairform checks all of these boxes. Connections use standard OAuth, access is read-only, and you can disconnect any source or delete your account at any time.
The bigger picture
Your fitness data tells an intimate story about your health, habits, location, and daily life. It deserves the same thoughtfulness you'd give to any other personal information.
The goal isn't to stop tracking — the data is genuinely valuable for training. The goal is to be intentional about where it lives, who can see it, and whether you can get it back.
Owning your fitness data starts with knowing where it is. The next step is bringing it together in a place you control.
Want to own your fitness data? Pairform is your personal fitness system of record — aggregate all your data in one place, free.