These changes were accompanied by an overhaul of the developer program. The old queue-based application system was eliminated in favor of a two-tier structure. A free Standard Tier now allows developers to self-serve upgrade their apps to serve up to 10 athletes immediately from an API settings dashboard without any formal review. A paid Extended Access Tier is available for commercial developers needing higher rate limits, prioritized support, and greater user capacity .
Furthermore, legal and technical housekeeping took effect the same day. A new API Agreement and a standalone API Policy mandate that every developer must use an approved API token, authenticate each user's account, and obtain explicit legal consent—including disclosures on data collection, usage, and deletion—before accessing any user's data . A new deauthorization endpoint was also added to the V3 API, set to become the only supported method for disconnecting users by June 1, 2027
.
The new login requirement is the most direct weapon in Strava's fight against unauthorized AI data harvesting. By forcing all users to authenticate, the company instantly cuts off automated scrapers that were pulling publicly visible activity details, including from public profiles and club listings. These datasets are highly valuable for training AI models, and blocking them protects user data as a proprietary corporate asset .
The introduction of the $11.99 developer fee serves as a secondary, financial gate against mass, unlicensed data aggregation by AI firms. This move is part of a broader industry pattern in which major consumer platforms tighten data access controls ahead of IPOs, seeking to demonstrate rigorous data governance to investors and regulators .
The timing is precise. Strava confidentially filed its draft S-1 registration statement with the SEC on February 2, 2026, with reports of a potential public debut as early as spring 2026 . The company hired Goldman Sachs as its lead underwriter
and was most recently valued at $2.2 billion in a May 2025 funding round led by Sequoia Capital
. With over 195 million users across more than 185 countries as of June 2026, and revenue reportedly growing 50% year-over-year to just under $500 million
, Strava is in a prime position to list. The June 1 lockdown is widely viewed as a necessary cleanup of data-access policies, intended to reduce legal and reputational risk in the eyes of IPO investors
.
These June 2026 changes are the culmination of a multi-year strategy. In November 2024, Strava had already updated its API agreement to strictly limit how third-party apps could use and display user data. The key 2024 restrictions included banning apps from displaying a user's activity data to anyone else, including coaches, and explicitly prohibiting the use of Strava data in artificial intelligence models or related applications .
The reaction from the developer community was swift and largely negative. The most common points of frustration include:
The reception wasn't universally negative. The elimination of the old application queue and the introduction of a self-serve, immediate upgrade path to serve 10 athletes was seen as a minor but genuine improvement for very small projects . Wearable and device integrations with major brands remain unaffected by the changes
.
In a revealing contrast, on the same day it locked out unauthorized AI scrapers, Strava opened an official, sanctioned AI channel for its subscribers. The company launched a Model Context Protocol (MCP) connector that allows paying subscribers to securely connect their Strava account to Anthropic's Claude AI .
Once connected, users can ask Claude natural-language questions about their own training history, such as "How has my running improved this year?" or "Are my easy runs actually easy?" The AI draws its answers directly from the user's private activity data, delivering in-depth personal insights without exposing information to other parties . This integration positions Strava as offering a premium, privacy-safe AI experience for its own users, even as it uses the new authentication wall and developer fee to block unlicensed third-party scraping of the broader community's data
.
Comments
0 comments