Acorns uses security measures to protect your data but explicitly states it cannot guarantee your data will never be breached.
This analysis describes what Acorns's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes Acorns' security practices and contemporaneously limits the scope of security assurances provided, allocating risk exposure related to inherent limitations of internet and electronic storage technologies.
The updated policy removes explicit language describing how data flows when users sign in via Apple or Google, including what information those services share with Acorns and how it is used. Previously, the policy stated that Acorns receives information such as name and email address through third-party sign-in services solely to manage accounts and provide services. The revised language also shifts the AI chatbot from an optional feature users 'may access' to a stated service Acorns 'uses' to direct users to internal articles. Users no longer have a published explanation of third-party sign-in data practices in the privacy notice, though the terms suggest data shared through third-party services remains subject to those providers' terms.
View change record →Despite holding your most sensitive financial identifiers, Acorns explicitly disclaims absolute security, meaning in a breach scenario consumers bear residual risk and Acorns' liability may be limited by this disclaimer.
How other platforms handle this
We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. However, no security system is impenetrable, and we cannot guarantee the security of our sy...
We use reasonable physical, technical, and administrative measures to protect information about you from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. While we take steps to protect your information, no system is completely secure. We cannot guarantee the securit...
You are responsible for maintaining the confidentiality of your Account password and for all activity that occurs under your Account. You agree to notify us immediately if you become aware of any unauthorized use of your password or Account or any other breach of security. We will not be liable for ...
Monitoring
Acorns has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We use a variety of security technologies and procedures to help protect your personal information from unauthorized access, use, or disclosure. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security.— Excerpt from Acorns's Acorns Privacy Policy
REGULATORY FRAMEWORK: GLBA Safeguards Rule (16 CFR Part 314, amended 2023) requires a documented information security program with specific technical and administrative safeguards; non-compliance carries FTC enforcement authority. Regulation S-P requires investment advisers to adopt written policies to protect customer records. State data breach notification laws (California Civil Code §1798.82; New York SHIELD Act; Illinois Personal Information Protection Act) require consumer notification within specified timeframes following a breach of financial data.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes Acorns' security practices and contemporaneously limits the scope of security assurances provided, allocating risk exposure related to inherent limitations of internet and electronic storage technologies.
Despite holding your most sensitive financial identifiers, Acorns explicitly disclaims absolute security, meaning in a breach scenario consumers bear residual risk and Acorns' liability may be limited by this disclaimer.
ConductAtlas has identified this type of provision across 1 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Acorns.