Over the last decade, smartwatches have become prevalent, and the market is estimated to grow, reaching a value of $80.1 billion by 2028 [1]. The increase in the market share was primarily due to the attractive personal features related to fitness, which could fulfil the three basic psychological needs: autonomy, competence and relatedness [2]. As a result, user uptake increased rapidly. However, fitness data is also very personal. While many users share their fitness data, they do not want it to be used or shared without their consent. Data protection is required by law, but if users need to learn how their data is used and whether or not the operations follow the privacy policies, how do they know that their data is protected? Our research analyses the agreements between each party involved around the end users of smartwatches and looks at how the smartwatch vendors and application developers handle data. As our case studies, we analyse how privacy could be violated using four of the biggest market share holders, namely Apple, Fitbit, Samsung and Garmin.