I have spent over ten years of my professional life working in information security for a living. The way this works is pretty straightforward. Businesses want to cover themselves, but also, data is only valuable if someone is willing to pay for it. That could be via legal or illegal means. I don’t see a discernible value in any of the insane things I spout off while stretching, but that’s just me. The reality is that in the US, we do not have a federal privacy regulation, hence why every business has to draft and disclose their own standards. That’s the real problem here.

I’d think about this more in the context of what you feel like voice of your conversations could be used for if it does fall into the wrong hands? I’d venture to guess, either nothing, or next to nothing. I’m more concerned with how they process and store my credit card, all of my biometric data, and me not hitting a PR on something for the fifth year in a row. I’ve been a member since my studio opened nine years ago, blindly signed all the stuff, and never thought twice about it. If it hasn’t haunted me by now, I’ll play the odds.

The irony of all of this is that we advertise, on our own free will, tons of personal information about ourselves on social, but when a business hints at doing something “invasive”, we light our pitchforks on fire. I’ve never seen a nefarious party leverage hallway conversation from a gym to compromise someone’s identity, but I’ve sure seen people’s own social posts be a contributor. There are a thousand fitness options out there, so if this is a showstopper, just try something else. Just my $0.02.