A Glimmer of Transparency in a Dark Corner of Tech

Grindr, one of the world’s largest dating apps catering to the LGBTQ+ community, has agreed to pay £26m to settle a lawsuit brought by 12,000 users alleging that their sensitive personal information, including HIV status, was shared with advertising companies. This payout is not an admission of guilt but acknowledges the distress and loss of trust expressed by some users regarding Grindr’s pre-2020 practices.

The settlement marks the end of a two-year legal battle, which began in April 2024 when UK law firm Austen Hays filed a claim at the high court of England and Wales. The lawsuit alleged violations of UK privacy laws during a period up to early 2020, when Grindr was owned by Beijing Kunlun Tech, a Chinese gaming company.

The £26m payout will be divided among the 12,000 users, averaging £2,167 per person if equally distributed. This amount is substantial, especially considering that six years ago, Grindr sold to San Vicente Acquisition in a $608m deal and was later valued at $2.65bn through its listing on the New York Stock Exchange.

Grindr’s recent history has been marked by significant changes in ownership and management. In 2018, the company announced it would stop sharing users’ HIV status with third-party companies after Norwegian researchers revealed data sharing practices. However, this was not enough to prevent Norway’s data protection authority from fining Grindr 65m Norwegian krone (£4.8m) in 2021 for violating data protection rules.

The fine and subsequent settlement raise questions about the responsibility of tech giants like Grindr to protect user data. While Grindr claims to have overhauled its privacy programme since 2020, with a focus on transparency and responsible data practices, the payout suggests that this commitment may be more symbolic than substantive.

A closer examination of Grindr’s past reveals a pattern of prioritizing profits over user trust. The company’s sale to San Vicente Acquisition in 2018 was followed by rapid growth and valuation increases, but also raised concerns about data security and potential national security risks due to China’s involvement. This deal, worth $608m, was significant considering Grindr’s relatively small user base at the time.

The settlement highlights the uneven playing field in tech regulation. While fines and settlements like these are not uncommon for companies accused of violating data protection rules, the lack of transparency in Grindr’s practices before 2020 raises concerns about the effectiveness of current regulations. As tech giants continue to grow and accumulate user data, it is essential that regulators and lawmakers prioritize stronger safeguards against data exploitation.

For users, the settlement means a mix of relief and frustration. Some may see the payout as vindication of their concerns, while others may feel that Grindr’s lack of admission or liability is a missed opportunity to hold the company accountable for its actions. The fact remains that 12,000 users had their sensitive information shared without consent, causing distress and loss of trust.

Data protection is not just a technical issue but also a social one. Companies like Grindr must prioritize transparency and user control over profits. Until then, the tech industry will continue to be plagued by scandals and regulatory headaches.

The £26m settlement serves as a reminder of the ongoing struggle for accountability in the tech world. While this amount may seem significant, it is just a fraction of Grindr’s current valuation. The real cost lies not in dollars or pounds but in the trust that has been eroded between users and companies like Grindr.