Health, fitness, and medical apps have become increasingly popular to help users manage their well-being. However, their widespread use raises significant concerns about data privacy, given the sensitive nature of the information they process. In this study, we evaluate the transparency and regulatory compliance of such apps by focusing on three key aspects: actual data transmission behavior, claims made in privacy policies—particularly concerning third-country recipients—and the presence of dark patterns in their user interfaces. We combine network traffic analysis with a systematic review of privacy policies to examine whether data is transmitted before consent and whether recipients align with disclosures. In addition, we analyze interface designs for manipulative elements that can hinder informed consent. Our results reveal discrepancies between stated and observed data flows, instances of pre-consent data transmission, and recurring dark patterns. These findings highlight critical transparency gaps and underscore the need for stronger enforcement and user-centered privacy design.