Dexcom G7

Is the Dexcom G7 app safe?

For your data, mostly yes. The Dexcom G7 app reads Dexcom's glucose sensors and shares readings with your clinic and followers, and neither app store shows tracking or data sharing with ad firms. The concerns sit elsewhere. In 2025 the app itself had a Class I recall, FDA's most serious type, because it could stop showing glucose without an alert. Dexcom received an FDA warning letter about how it makes and changes its sensors, and in October 2026 a hacking group claimed to have breached the company.

We score the Dexcom G7 app 67/100, behind Abbott's FreeStyle LibreLink (71), mainly because the app's own software had alert failures and because of the open breach claim.

What Dexcom collects

Apple's label for the G7 app lists health and fitness data, contact info, contacts, user content, identifiers, usage data and diagnostics as linked to you. Contacts are there because you can invite followers. There is no "Data Used to Track You" section. On Google Play, Dexcom says it shares no data with other companies, though your email may be used for marketing.

Dexcom's privacy notice, updated in October 2025, covers the G7, Follow, Clarity and Stelo apps together. It says Dexcom does not sell consumer data for money "in the traditional sense," but that cookies and disclosures to ad and social networks on its websites may count as a sale or sharing under US state laws. Dexcom honours Global Privacy Control for those cookies. Data handled for HIPAA purposes falls under a separate Notice of Privacy Practices, and Dexcom may create de-identified data under the HIPAA standard and promises not to re-identify it.

The app recalls

The July 2025 correction is the one to know about. G7 apps on iPhone, Apple Watch and Android up to version 2.8.0 did not show the "Sensor Failed" alert when a transmitter failed. Instead, the app ended the session and showed a "Start Sensor" screen, so readings and alarms could stop without warning. FDA's enforcement data lists about 908,000 iOS installs affected, and FDA said use of affected versions "may cause serious adverse health consequences, including hypo/hyperglycemia and death." Dexcom reported no injuries. Dexcom made the update mandatory, and older versions stopped working after 20 August 2025.

Smaller faults followed. Version 2.7.0 on iPhone could freeze on a stale reading (Class II, May 2025), and versions 2.9.0 to 2.11.2 could delay readings and alerts while running in the background (Class II, April 2026). In May 2025 Dexcom recalled about 602,000 G7 receivers whose speakers could fail, which FDA also put in Class I. And in May 2026 Dexcom warned that two lots of scrapped G7 sensors, one possibly not sterilised, had been stolen and resold through a distributor called Pharmsource.

The FDA warning letter

On 4 March 2025 FDA sent Dexcom a warning letter after inspections at its San Diego and Mesa plants. FDA found that Dexcom had changed a component in the sensor's resistance layer for G6 and G7 without adequate validation, that a clinical equivalence study "did not meet its primary endpoints," and that risk analyses did not cover use with automated insulin dosing systems. FDA called the devices adulterated and misbranded until fixed. The letter does not cite the app. Dexcom said in its February 2026 annual report that it was still responding to the letter, and we found no close-out.

Under our rules, an FDA warning letter is a regulator warning, not a fine. Because it concerns sensor hardware rather than the app, it counts at half weight here.

Was Dexcom breached?

In early October 2026 the extortion group ShinyHunters listed Dexcom on its leak site. Three class actions filed in the Southern District of California allege that names, birth dates, driver's licence numbers, insurance and medical information were taken. Dexcom has not confirmed a breach, sent notices or filed a cybersecurity report with the SEC, as far as we could find. These are claims, not findings.

Dexcom runs a coordinated vulnerability disclosure programme and says it does penetration testing. We found no bug bounty, no published security certificate and no two-step login option for Dexcom accounts.

What about the Stelo app?

Stelo is Dexcom's over-the-counterOver-the-counterA medicine you can buy without a prescription, in a pharmacy or shop, with directions on the pack for safe use without a doctor.More in the glossary sensor, and its app falls under the same privacy notice as the G7 app. FDA cleared Stelo through 510(k) K234070 on 5 March 2024, the first CGM sold without a prescription, for adults who do not use insulin. FDA says it "is not designed to alert the user" to low glucose, so it is not a substitute for the G7 if you take insulin. Apple's label for Stelo lists health, contact, identifiers, usage and diagnostic data linked to you, with no "Data Used to Track You" section. In October 2026 it had only 681 ratings on the US App Store, averaging 2.5 stars. We found no FDA recall naming Stelo, and we do not score it separately.

How to use the Dexcom G7 app safely

1. Keep the app and your phone's operating system updated, and check Dexcom's compatibility list before a major phone update.
2. Do not let your phone's battery saver or focus modes silence Dexcom alerts, and test your urgent low alarm.
3. Buy sensors only from Dexcom's authorised distributors, and check lot numbers at dexcom.com/theft-check if you bought from an independent pharmacy.
4. Use a strong, unique password for your Dexcom account and watch for phishing that mentions the breach claim.
5. Review your Follow list and connected clinics, and turn on Global Privacy Control in your browser.

How we scored it

The regulatory record (83) is the strongest factor: no privacy fine, with the open sensor warning letter counted at half weight. Security (58) is the weakest, held down by the unconfirmed October 2026 breach claim and no visible bug bounty or two-step login. Scams and harmful content (68) reflects the app's own Class I recall for missing alerts. Privacy (68) is good for a medical app, with no tracking on either store label.