Smartphone apps are sending sensitive user data to Facebook, including health information, without users’ consent, according to a report by The Wall Street Journal.

An analytics tool called “App Events” allows app developers to record user activity and report it back to Facebook, even if the user isn’t on Facebook, according to the report.

The data-sharing is related to a data analytics tool that Facebook offers developers. The tool lets developers see statistics about their users and target them with Facebook ads.

According to the Journal, Instant Heart Rate: HR Monitor; Flo Health, which tracks a woman’s period and ovulation; and real-estate app Realtor.com were among the apps that sent data to Facebook.

Facebook told the Journal that some of the data-sharing appears to violate its business terms. The company says it requires app developers to be clear with users about what they share.

Facebook is dealing with increased scrutiny over how it handles user data. Last week, British lawmakers issued a scathing report calling for tougher privacy rules for Facebook and other tech firms.

The U.S. Federal Trade Commission has been investigating the Cambridge Analytica scandal and is reportedly in negotiations with Facebook over a multibillion dollar fine.