Stash updated its privacy policy effective March 28, 2026, expanding the scope of personal data it collects and clarifies how that data is used. The policy now explicitly includes collection of driver's license numbers, geolocation data, commercial information, internet activity, audio/video recordings of customer service calls, and inferences drawn from personal data to create behavioral profiles. The policy also broadens the definition of "Stash" to include third parties acting on the company's behalf, expands the user scope beyond customers to "any other users of our Services," and adds a commitment to maintain anonymized data in deidentified form.
Consumers: Stash now tells you it collects your location, driver's license number, records your calls, and creates profiles of your behavior and preferences.
Consumers: Your data may now be shared with third-party service providers that work on Stash's behalf, not just Stash and its direct affiliates.
Data controllers: The privacy policy now covers anyone who uses Stash services, including visitors and other users beyond just paying customers.
The updated policy explicitly discloses collection of geolocation data, driver's license numbers, audio and video recordings of customer service calls, and inferences drawn from your personal data to create behavioral profiles reflecting your preferences, characteristics, and psychological trends. The policy also expands the definition of "Stash" to include third parties acting on the company's behalf, meaning your data may be shared with external service providers. The policy now applies to all users of Stash services, not just registered customers. You can review your account settings or contact Stash at the provided email or phone number to access, review, or modify personal information you have provided.
→ Review your account settings to understand what personal information Stash has collected about you.
→ Contact Stash at privacy@stash.com or (800) 205-5164 to request access to, review, or modify your personal information.
→ Review Stash's updated privacy notice and California Notice at Collection for additional disclosures about data collection and your privacy rights.
Expanded to explicitly include driver's license numbers, geolocation data, commercial information, internet activity, call recordings, and behavioral inferences.
Broadened to include third parties acting on Stash's behalf, clarifying data sharing with external service providers.
Added explicit commitment to maintain anonymized data in deidentified form and not attempt to reidentify the information.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Stash expanded its privacy policy to explicitly enumerate collection of sensitive personal information categories including geolocation, driver's license numbers, call recordings, and behavioral inferences. The policy broadens the definition of "Stash" to include third parties …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-X-005603.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
Get alerted when this policy changes again, including what changed and why it matters.