The Data Gap

The world collects unprecedented health data, yet female biology remains profoundly under-represented in medical research. Wearable sensors now capture heart rate variability, skin thermography, and electrodermal activity. Mobile apps log menstrual cycles, sleep architecture, and symptom diaries. Cloud platforms aggregate this longitudinal data into petabyte-scale datasets. Yet one entire dimension of human physiology (the female endocrine system, particularly menopause) is systematically excluded from clinical discovery. While emerging research teams (such as “Cool Flash,” a finalist at the University of Waterloo’s Quantum Valley Investments Problem Pitch Competition) are investigating the neuroendocrine mechanisms of hot flashes, they operate under a structural deficit: no trustworthy, ethically governed ecosystem exists for women’s health data. They are forced to rely on fragmented, self-reported data or male-normative datasets, extrapolating outcomes from bodies with different hormonal profiles, metabolic rates, and neuroanatomy. The crisis is institutional failure.

The female health data gap is systemic, not accidental. For decades, preclinical drug trials excluded female subjects. Until 2020, 80 percent of preclinical trials used exclusively male animals. This exclusion was protocol, not oversight [1] . Regulatory agencies justified this by citing hormonal variability, a rationale that ignored male variability in circadian rhythms, activity, and testosterone cycles. The consequence was predictable: drug adverse reactions in women are nearly twice as common as in men, and almost 80 percent of drug withdrawals since 1997 resulted from side effects more prevalent in women [2] . The 2019 book Invisible Women by Caroline Criado Perez documented hundreds of examples (from seatbelt design to algorithmic triage) where defaults based on male normativity created dangerous blind spots  [3] . This gap persists not because of ignorance, but because incentive structures favour efficiency over equity. Data collection on women remains piecemeal, siloed, and uncoordinated.

Menopause, affecting half the population over age 50, remains a black box. Despite its scale, menopausal health research receives less than 1 percent of NIH funding for age-related conditions [4] . Furthermore, 74 percent of clinical studies rely on incomplete, self-reported symptom logs [5] . The infrastructure is immature.

The Information Monopoly

The information monopoly in health data has consolidated in the hands of three technology giants: Apple, Google, and Amazon. Their wearables, health apps, and smart devices collect real-time, continuous physiological data from millions of women. This data flows through channels that are exempt from HIPAA regulation [6] , which only governs providers, insurers, and clearinghouses, not consumer-facing health technology. Women consent to boilerplate terms in exchange for insights into their sleep or cycle length, unaware their biometric data may be sold, licensed, or anonymised into research markets. Data labour (the unpaid, invisible work of providing data for profit) is unequally distributed: women bear a disproportionate burden because they are more likely to use these devices for chronic condition management, reproductive tracking, and mental health monitoring. Yet no economic benefit returns to them. The datasets collected are also non-representative: they skew toward high-socioeconomic-status users with access to premium devices, and are rarely analysed with sex-specific biological variables. The result is a feedback loop: women’s health data is collected, but never used to improve women’s health outcomes.

The solution is rearchitecting ownership.

Data Sovereignty as Architecture

Data sovereignty is defined here as the right of individuals to own, control, and decide how their personal health data is used, including the ability to grant, revoke, audit, and profit from access. This is an institutional necessity1 This is an institutional necessity1 . Regulatory momentum validates this. The GDPR’s Article 20 enshrines data portability; the US 21st Century Cures Act mandates interoperability via FHIR2 FHIR2 standards; Canada’s PIPEDA mandates transparency in data handling. Existence proofs already exist: the Swiss nonprofit Midata has built a member-governed platform with 78 percent user trust; Spain’s Salus.coop uses blockchain-backed consent management with 22,000 participants; Open Humans provides an open-source infrastructure where users upload data and earn modest stipends for research access. But none of these platforms are designed for women’s specific biological context or include an economic attribution model. A women’s health data cooperative (a cooperative entity owned, governed, and financially benefited by women) fills this gap.

This cooperative would rest on a technical stack built for integrity and empowerment. Data storage would use Solid pods3 Solid pods3 , decentralised personal data stores that remain under individual control. Interoperability would be managed via FHIR, ensuring compatibility with electronic health records and clinical trial registries. Governance would be encoded on a permissioned blockchain. This blockchain would not serve cryptocurrency speculation. It would function as a governance ledger: recording every consent decision, every data query, every royalty attribution . Researchers would request access via authenticated API. Each data usage would trigger a digital signature logged permanently on-chain. Users who contribute their data would earn a share of licensing revenue, a structural inversion of today’s extractive model.

Strategic Positioning

Rumelt’s strategy kernel provides a framework for execution. The diagnosis is simple: the obstacle is the absence of a trustworthy, governance-equipped platform that enables women to contribute data while retaining ownership and receiving benefit. Incumbents exploit regulatory loopholes and erode trust. The guiding policy is to establish a nonprofit-for-profit hybrid: a cooperative where women’s health datasets are pooled and licensed to academic and pharmaceutical researchers via a royalty model. Revenue (derived from institutional licensing, not data sales) returns directly to contributors. The platform remains free for users; monetisation occurs only when institutions access aggregated, de-identified datasets.

The coherent actions are fivefold:

  1. Build a Menopause Data Hub MVP that ingests real-time data from Fitbit, Apple Health, and Oura devices.
  2. Launch ethical research partnerships with three universities committed to publishing findings under an open-science framework.
  3. Implement royalty attribution via blockchain, so every contribution is tracked and rewarded.
  4. Design a user governance board with veto power over all data access requests, modelled on democratic cooperatives like Mondragon.
  5. Advocate for closing HIPAA’s consumer app exemption through targeted policy interventions.

Revenue models must avoid exploitation. Selling raw data is not an option. Three legitimate streams exist:

StreamMechanismEthical?
Research licensing feesInstitutions pay for aggregated dataset accessYes
Royalty distribution15 percent of revenue to contributing usersYes
Platform licensingHealth systems license the data pipelineYes
Grant fundingNIH, CIHR seed fundingYes
Selling raw dataDirect sale of individual recordsProhibited

Grant funding, particularly from the National Institutes of Health and the Canadian Institutes of Health Research, would seed early development. The goal is to restore agency.

A Phased Approach

MVP (0–12 months): Partner with three universities (University of Waterloo, University of Toronto, and University of British Columbia) to build an encrypted data pipeline from consumer wearables. Deploy on-chain consent protocols. Onboard 1,000 women focused on menopause symptom tracking.

Scale (12–36 months): Issue 50 research licenses. Distribute first royalty payments to users. Publish the first collaborative study in The Lancet Digital Health. Apply for PIPEDA and Canada Health certification to formalise trust.

Ecosystem (36+ months): Become the global standard for women’s health data governance. Pursue partnerships with WHO and FDA. License the cooperative architecture to health ministries in the UK, Australia, and Germany.

A critical validation question remains: Can a founding partnership be secured with a major research institution committed to using the cooperative’s data for its next menopause clinical trial?

Closing

Teams like Cool Flash represent the next generation of researchers: agile, focused, and attuned to the lived realities of biological asymmetry. They deserve datasets that reflect the complexity of female physiology, not extrapolations from male bodies. This is what Innovation Sanctuaries look like in practice: protected domains where long-term, purpose-driven innovation can evolve without quarterly returns. Data sovereignty in health is a prerequisite for equitable outcomes. The regulatory momentum exists. The scientific need is quantified. The technical architecture is proven. The remaining question is governance: who will build the institution women choose to trust?

References