Fitness App Privacy: Can Strava Reveal Your Home?
A run is a line on a map. If it begins and ends at the same place every day, that place is probably where you live.
By Siddharth ShankarUpdated October 11, 2026Strava's Map Visibility controls can hide the start and end of your activities, and its support page says the first and last 200 meters are hidden automatically after your first upload. You can also choose address-based or start-and-end hiding, set activity visibility to Everyone, Followers or Only You, and opt out of heatmap contributions. These settings apply to Strava only and may not stop someone inferring a location.
Your email is the key to most of your accounts. Has it already leaked?
Free · About 30 seconds · No sign-up · Email not stored
Fitness apps are a good example of passive data. You are not posting your address, yet the app records where you start and stop. Share the activity publicly and a stranger can often work out which house is yours.
How a route points to a home
Most people walk, run or ride out from home and back. If the activity map shows the full path, the start and end point sit on the same block. After several activities, the pattern is obvious: the same early morning start, the same finish point, the same neighborhood.
Add a username that matches your real name, a profile photo and a city, and the map completes the rest.
Strava's map and visibility controls
Strava's community help describes these controls under Privacy Controls:
- Map Visibility: hides parts of your route on the map from other people. The first and last 200 meters of activities are hidden automatically after your first upload.
- Hiding options: address-based hiding with a radius of about one mile, hiding the start and end points, or hiding the whole map.
- Activity visibility: Everyone, Followers or Only You. The default setting applies to future uploads.
- Profile page visibility: Everyone or Followers.
These controls do not hide the activity itself from followers. They hide parts of the map. Strava also says the controls apply on Strava only, so a run you also post on another site is not affected.
Heatmaps
Strava's global heatmap aggregates activities from members whose activities are visible to Everyone. Activities contribute by default, and you can opt out in the Product Improvement section of Privacy Controls. Flybys, which show people who were nearby during an activity, require both people to be set to Everyone.
In January 2018, CNBC and others reported that Strava's global heatmap, built from over a billion activities, appeared to show the locations of sensitive military sites. The analyst Nathan Ruser highlighted the issue, and Strava restricted the level of detail in March 2018. The lesson holds for anyone: aggregated, anonymous-looking data can still reveal real places.
Quick check before you read on: is your email in a known data breach? Free, about 30 seconds.
Free · About 30 seconds · No sign-up · Email not stored
How to reduce what a route reveals
1Review activity defaults
In Privacy Controls, set the default for new activities to Followers or Only You if you do not want strangers to see them.
2Add a larger hiding area
Use address-based hiding around your home or start-and-end hiding. A larger radius gives more cover.
3Start and stop somewhere else
For sensitive routes, begin the recording a few blocks away or pause before you arrive home.
4Opt out of the heatmap
Find the Product Improvement setting and turn off contributions if you do not want your activities included.
5Check your followers
Remove people you do not know. Approving unfamiliar followers defeats the purpose of Followers visibility.
6Look at other apps and devices
Running watches, cycling apps and social posts can store similar maps. Repeat the review wherever you share activities.
Connected posts and photos
An activity summary shared to social media can include a map thumbnail. Photos taken during a run may also include location data. If you share an activity elsewhere, read what the image shows. For a broader guide to location exposure, read what is doxxing and how to protect yourself.
Who should be especially careful
People who have stalkers or difficult exes, those who live alone, public-facing workers, and anyone with a recognizable name should treat start and end points as sensitive. The same goes for children's activities if they use an app under a parent's account.
Sources
- Strava Support: Edit Map Visibility (first and last 200 meters hidden by default after first upload; hiding options)
- CNBC: A global heat map for joggers is exposing sensitive US military information (about a billion activities, Nathan Ruser)
- Engadget: After exposing secret military bases, Strava restricts data visibility (March 2018 heatmap restrictions)
Frequently asked questions
Does Strava hide my home automatically?
Strava's support page says the first and last 200 meters are hidden automatically after your first upload. For stronger cover, set your own hiding option.
Can people still see my activity if I hide the map?
Yes. The hiding controls affect parts of the map, not the existence of the activity. Use activity visibility to restrict who sees it.
Do these settings work on other apps?
No. Strava says the controls apply to Strava only, so review each app separately.
What is the heatmap?
It is an aggregate view of activities from members. Activities set to Everyone contribute by default and you can opt out in Privacy Controls.
Can a route still reveal my address with hiding on?
It can if the visible route clearly loops back to a neighborhood. Use a larger hiding area and avoid predictable patterns.
See if your email has already leaked
- Checks your email against known data breaches
- Shows which sites leaked it, when, and what leaked
- We do not store the email you check
Compare data removal services
See which services work in your country, what they cost, and the free do-it-yourself route.
Compare removal services →Prefer a one-time report first? Scan My Shadow, our sister service, $9.99.