Private by default, not by option
GPS start/finish zones are blurred at write time, never client-side and never reversibly; start times and health data never show up on a public view. Accounts are protected by two-factor authentication, strong passwords and anti-bruteforce throttling; sign-up is always invite-only.
Screenshot coming soon: two-factor authentication settings and a preview of a blurred public view