You strapped on a fitness tracker to guilt yourself into more steps and fewer midnight snacks. Nobody mentioned it's also filing a nightly deposition on your heart rate, your GPS coordinates, and whatever cardio you were doing at 2 a.m. that wasn't running — one a government subpoena can read without so much as knocking.

This is basically the Iron Man suit, minus the flying and the billions. A device stitched with sensors, streaming your vitals to a processor in real time, telling you exactly how your body's holding up. The difference is that when Tony Stark's heart rate spiked mid-makeout with Pepper Potts, JARVIS kept that data locked inside the suit. Your watch mails a copy straight to a corporate server with a legal compliance department and, as of this month, a documented subpoena problem.

A new Electronic Frontier Foundation investigation checked ten major wearable makers — Garmin, Oura, Whoop, Fitbit, and friends — and found exactly one, Apple, that actually locks your health data so only you can open it. Everybody else runs the industry-standard move: encrypt the data in transit, encrypt it on the server, then quietly keep a spare key in the company's back pocket "just in case." Less vault, more diary with a tiny brass lock the company also owns a key to, sold separately, always available upon request. The funny part is why: build the version that locks even the company out, and your AI features go quiet, since sleep scores, stress alerts, and recovery insights all need a server somewhere reading your actual heart rate to do the math. No JARVIS-style local processing here — just a much less cool version of the suit that phones home.

Which makes your smartwatch less Tony Stark's AI butler and more a nosy roommate who reads your diary nightly to give you life advice, means well, and still hands the whole thing over the second someone in a suit and a subpoena knocks.

Roughly 40% of Americans already wear one of these confessional booths on their wrist. Apple Watch owners who keep their data strictly inside Apple Health, no syncing to Strava, get the one version with an actual deadbolt. Everyone on Garmin, Whoop, Oura, or Fitbit is one subpoena away from handing over their sleep, heart rate, and jogging routes exactly as recorded, and wearable data has already shown up in real court cases contradicting people's stories about where they were.

Your Fitbit isn't just tracking your steps. It's building a case file, and unlike Tony Stark, you don't own the company that could just shred it.