The agreement states that Google may share personal data including name and email address with Content Providers to process transactions or deliver Content, with Providers obligated to use the data per their own privacy policies. Separately, the terms disclose that device identifiers including SIM subscriber ID and SIM serial number are transmitted to the user's mobile network operator to determine billing eligibility.
This analysis describes what Google Play Store's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes two distinct personal data sharing flows: transaction-related sharing of name and email with Content Providers governed by each Provider's independent privacy policy, and transmission of device-level SIM identifiers to mobile carriers for billing eligibility. Under this clause, the data protection standards applicable to shared information vary by recipient and are not uniformly governed by Google's Privacy Policy.
Interpretive note: The legal basis and specific data handling standards applicable to Provider-side data use are not specified in this document, creating uncertainty regarding the level of data protection users can expect from third-party Providers.
The updated terms establish two new financial obligations for subscription users. First, Google may charge your payment method up to 48 hours before the start of a billing period, rather than 24 hours as previously stated. Second, the revised terms now explicitly state that if a subscription charge fails and you have not cancelled, you remain responsible for the uncollected amount, and Google may attempt to charge a backup payment method. This may alter your billing dates and the timing of when you are billed each period. Additionally, users are now explicitly liable for any background data fees incurred by Google system services and content updates, including when the device screen is locked. You can review your subscription settings in Google Play to monitor billing schedules and update payment methods.
View change record →Expanded data sharing scope to include device identifiers and SIM information shared with mobile carriers upon account creation.
View full change record →Under this provision, personal data including name and email may be disclosed to third-party Content Providers whose privacy practices are governed by their own policies rather than solely by Google's Privacy Policy. Additionally, device identifiers (SIM subscriber ID and SIM serial number) are transmitted to the user's mobile network operator when a Google Play account is created on a device to assess carrier billing eligibility.
How other platforms handle this
We will also provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected.
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
to request that your data be transferred to a third party (data portability)
"Google có thể cần cung cấp thông tin cá nhân của bạn, chẳng hạn như tên và địa chỉ email của bạn, cho Nhà cung cấp để xử lý giao dịch của bạn hoặc cung cấp Nội dung cho bạn. Các Nhà cung cấp đồng ý sử dụng thông tin này theo chính sách bảo mật của họ. [...] khi bạn tạo tài khoản Google Play trên Thiết bị, chúng tôi sẽ gửi thông tin nhận dạng của Thiết bị của bạn, như ID người đăng ký và số sê-ri trên thẻ SIM tới nhà cung cấp mạng của bạn.Excerpt from Google Play Store's Google Play Terms
(1) REGULATORY LANDSCAPE: This provision engages GDPR (for EU users) regarding the lawful basis and transparency requirements for sharing personal data with third-party Controllers (Content Providers), and potentially Article 28 processor obligations if Providers act …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes two distinct personal data sharing flows: transaction-related sharing of name and email with Content Providers governed by each Provider's independent privacy policy, and transmission of device-level SIM identifiers to mobile carriers for billing eligibility. Under this clause, the data protection standards applicable to shared information vary by recipient and are not uniformly governed by Google's Privacy Policy.
Under this provision, personal data including name and email may be disclosed to third-party Content Providers whose privacy practices are governed by their own policies rather than solely by Google's Privacy Policy. Additionally, device identifiers (SIM subscriber ID and SIM serial number) are transmitted to the user's mobile network operator when a Google Play account is created on a device …
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Google Play Store.