The policy states that the platform may collect precise geolocation data through device GPS or similar technologies where the user has granted permission, as part of standard service operation.
This analysis describes what Hims & Hers's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Precise geolocation is classified as sensitive personal information under CPRA and may also engage state consumer health data statutes where location data is used to infer health-related behavior. The collection of this category requires disclosure of purpose and, for California residents, the right to limit its use.
This provision establishes that precise device location data may be collected during platform use where device permissions have been granted. Under California law, this is sensitive personal information subject to the right to limit use.
Cross-platform context
See how other platforms handle Precise Geolocation Data Collection and similar clauses.
Compare across platforms →Monitoring
Hims & Hers has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We may collect precise geolocation data when you use our Services, including through your device's GPS or other location technologies, where you have provided permission to do so.— Excerpt from Hims & Hers's Hims & Hers Privacy Policy
1) REGULATORY LANDSCAPE: CPRA classifies precise geolocation as sensitive personal information. Washington My Health MY Data Act may apply where location data is used to derive health-related inferences. The FTC Act applies to deceptive or unfair location data practices. State location privacy laws in other jurisdictions may create additional obligations. 2) GOVERNANCE EXPOSURE: Medium. Location data collection is disclosed and conditioned on user device permission. The primary compliance risk is whether location data is used in advertising or analytics contexts in ways that constitute use of sensitive personal information beyond service delivery purposes. 3) JURISDICTION FLAGS: California CPRA creates specific obligations for precise geolocation as a sensitive category. Washington My Health MY Data Act may apply where location is used to infer health-seeking behavior such as pharmacy or clinic visits. 4) CONTRACT AND VENDOR IMPLICATIONS: Any vendor receiving precise geolocation data should be assessed for contractual limitations on secondary use, particularly advertising or data broker purposes. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should confirm that the purpose for which precise geolocation is collected is specified in the policy, that permission requests are presented clearly at the device level, and that location data is not transmitted to advertising partners without appropriate opt-out or consent mechanisms.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 3 platforms + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Precise geolocation is classified as sensitive personal information under CPRA and may also engage state consumer health data statutes where location data is used to infer health-related behavior. The collection of this category requires disclosure of purpose and, for California residents, the right to limit its use.
This provision establishes that precise device location data may be collected during platform use where device permissions have been granted. Under California law, this is sensitive personal information subject to the right to limit use.
ConductAtlas has identified this type of provision across 11 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Hims & Hers.