Grindr to pay £26m to settle claims it allegedly shared users' HIV status

- Published
Grindr has agreed to pay £26m to settle a lawsuit over allegations it shared users' personal information - including their HIV status - with third parties.
The world's largest LGBTQ+ dating app was sued in the High Court in 2024 over claims it misused people's personal information.
The class action suit was later served in the US, with the law firm leading the case saying it had signed up more than 11,000 claimants.
According to a US regulatory filing, Grindr will make two £13m payments to settle the claims. The firm said the settlement includes no admission of liability.
Grindr stressed the claims relate to "historical data practices" before 2020 when it was owned by Chinese firm Kunlun.
The filing submitted to the US Securities and Exchange Commission, external by Grindr said a settlement had been reached on 2 September.
"While Grindr disputes the allegations, it recognizes and acknowledges the distress and loss of trust expressed by some of its UK users regarding that pre-2020 period," the company said in its filing.
The firm has agreed to pay £13m to the counterparties by 31 December and a further £13m by 31 March 2027.
'Significant distress'
The claims brought more than two years ago by law firm Austen Hayes alleged Grindr had shared sensitive data with third parties for commercial purposes, breaching UK privacy laws.
It said this included information about the ethnicity and sexual orientation of its users.
People on Grindr have the option to share their HIV status along with when they were last tested - a move it says aims to reduce stigma, facilitate conversations and help users make informed health choices.
Chaya Hanoomanjee, the lawyer who led the claim, said in April 2024 claimants had "experienced significant distress" over their sensitive and private information being shared without their consent.
She said the company "owes it to the LGBTQ+ community it serves to compensate those whose data has been compromised".
Two data analytics services, Apptimize and Localytics, were identified as third parties with access to the sensitive data.
The claim said a potentially unlimited number of third parties used it to customise advertisements to Grindr's users.
It followed revelations in 2018 that Grindr had been sharing personal data, including the HIV status of its users, with the two data analytics providers.
Grindr defended the practice at the time as in line with industry standards – but it said it then stopped sharing HIV data with those companies.
It was fined £5.5m by Norway's data protection watchdog and, later in 2022, reprimanded by the UK Information Commissioner's Office for its data practices.
The company said in its filing on Friday that since 2020, it had "overhauled" its privacy practices to help meet the "unique needs of its community".
"Grindr is and remains a safe space for users, committed to transparency, user control, and responsible data practices," it said.
Sign up for our Tech Decoded newsletter to follow the world's top tech stories and trends. Outside the UK? Sign up here.
Related topics
- Published2 days ago
- Published12 November 2025
- Published3 April 2018

Facts Only

* Grindr agreed to pay £26 million to settle a lawsuit over allegations of sharing user personal information, including HIV status.
* The class action suit was filed in the High Court in 2024 and later in the US, involving over 11,000 claimants.
* Grindr will make two £13 million payments to settle the claims.
* The settlement includes no admission of liability.
* Claims relate to "historical data practices" before 2020 when Grindr was owned by Kunlun.
* The lawsuit alleged sharing information about ethnicity and sexual orientation with third parties.
* Two data analytics services, Apptimize and Localytics, were identified as third parties with access to sensitive data.
* Claimants reported experiencing "significant distress" over the sharing of their private information without consent.
* Grindr had previously shared HIV data with the two data analytics providers in 2018.
* Grindr was fined £5.5m by Norway's data protection watchdog and reprimanded by the UK ICO in 2022.

Executive Summary

Grindr agreed to a settlement totaling £26 million to resolve claims regarding the sharing of user personal information, including HIV status, with third parties. The class action suit, which involved over 11,000 claimants in the US, resulted in two separate £13 million payments scheduled for disbursement by December 31st and March 31st, 2027, respectively. Grindr stated that the claims related to "historical data practices" prior to 2020 when it was owned by the Chinese firm Kunlun. The company acknowledged distress and loss of trust among some UK users regarding this pre-2020 period but disputed the allegations themselves.
The lawsuit alleged that Grindr shared sensitive user data, including ethnicity and sexual orientation, with third parties for commercial purposes, breaching UK privacy laws. Claimants cited significant distress over the non-consensual sharing of this private information. The litigation identified two data analytics services, Apptimize and Localytics, as third parties with access to the data, which was reportedly used to customize advertisements. Grindr responded by noting that it had overhauled its privacy practices since 2020 to align with community needs and emphasized its commitment to transparency and user control.

Full Take

The situation reveals a persistent tension between commercial data practices, evolving privacy expectations, and corporate accountability within digital platforms. The core conflict lies in the discrepancy between historical operational methods—sharing sensitive health and identity data with external analytics firms—and contemporary standards for user trust and data protection. While Grindr reframed its approach post-2020 as an overhaul driven by community needs, the settlement acknowledges past distress without fully validating the depth of the breach alleged. This dynamic highlights how organizational narratives (e.g., "safe space," "overhauled practices") function to manage liability while attempting to redefine past actions within a new context. The pattern involves entities using legal mechanisms to process historical data liabilities under the guise of compensation rather than fundamental systemic change regarding data ownership and consent. The question is whether settlements adequately address the inherent harm resulting from asymmetrical power dynamics when sensitive, historically collected data becomes monetized through opaque third-party arrangements. What structural changes are required beyond financial redress to ensure that evolving privacy standards mandate proactive data governance rather than reactive damage control?

Sentinel — Human

Confidence

The text appears to be a factual summary of a legal settlement, characterized by direct sourcing and the presentation of competing claims, suggesting a foundation in human journalistic investigation.

Signals Detected

Moderate sentence length variance; uses direct legal/corporate quoting mixed with narrative flow.

Maintains a clear, if adversarial, structure detailing the lawsuit, the claims, and the response without excessive emotional weighting.

Information flows logically from the settlement amount to the background of the claims to the company's defense.

Specific figures (£26m, 11,000 claimants) and direct citations from regulatory filings suggest grounding in specific documentation.

Human Indicators

The use of precise legal terminology (e.g., class action suit, admission of liability, data protection watchdog fines) integrated with narrative framing suggests editorial synthesis rather than pure LLM generation.

The juxtaposition of the company's defense against user distress and the specific findings of the claimants lends a structure typical of investigative reporting.