Home Depot · Home Depot Privacy Policy · View original document ↗

Precise Geolocation Data Collection

Medium severity High confidence Explicitdocumentlanguage Uncommon · 9 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Home Depot Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Home Depot may collect your precise physical location through its mobile app or website if you grant permission, as well as your general location from your IP address.

This analysis describes what Home Depot's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Precise geolocation data can reveal sensitive details about your daily movements, routines, and personal life, and is classified as sensitive personal information under CPRA and several other state privacy laws.

Consumer impact (what this means for users)

If you use the Home Depot app and have location permissions enabled, your precise location data may be collected and used for personalization, advertising, and analytics, and may be shared with third-party partners.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Opt Out of Arbitration
    Open your device's settings, navigate to the Home Depot app permissions, and set location access to 'Never' or 'While Using' to limit precise location collection. You can also submit a request to limit use of sensitive personal information via Home Depot's privacy rights portal.

How other platforms handle this

Hulu Medium

We may collect the precise geographic location of your device when you use our services. We collect this information with your consent where required by law. You can withdraw your consent at any time by adjusting your device settings to disable location sharing.

GOAT Medium

We may collect information about your location, including precise geolocation information, when you use our Services. We use this information to provide location-based services, such as showing you products available in your area, and for other purposes described in this Privacy Policy.

DoorDash Medium

Geolocation Information, if you have consented by enabling location access, we may receive and store your precise location information, including when our apps are running in the foreground (our app is open and on screen) or background (our app is open, not on screen) of your device. You may use our...

See all platforms with this clause type →

Monitoring

Home Depot has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
Geolocation data. We may collect precise geolocation data (i.e., your specific location, as contrasted with your general location) when you use our mobile applications or visit our websites, if you permit us to do so. We may also collect general location information (such as the city or region you are in) from your IP address or other sources.

— Excerpt from Home Depot's Home Depot Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: Precise geolocation is classified as sensitive personal information under CPRA, which requires that consumers be given the right to limit the use and disclosure of such data. Several additional state privacy laws including those in Virginia, Colorado, Connecticut, and Texas also treat precise geolocation as sensitive data requiring heightened consent or opt-in mechanisms. The FTC has taken enforcement actions against companies that collect and share location data without adequate consumer notice. GOVERNANCE EXPOSURE: Medium. The policy conditions precise geolocation collection on user permission, which partially mitigates exposure, but the adequacy of the consent interface (opt-in vs. opt-out, clarity of disclosure at point of collection) should be evaluated against each applicable state framework. Sharing precise location data with advertising or analytics partners may require additional disclosures or restrictions. JURISDICTION FLAGS: California (CPRA sensitive data), Colorado (Colorado Privacy Act), Virginia (Consumer Data Protection Act), Washington (My Health MY Data Act for health-related location data), and Illinois create varying levels of heightened obligation. The policy's reference to user permission does not specify whether this constitutes opt-in consent as required by some state laws. CONTRACT AND VENDOR IMPLICATIONS: Third-party advertising and analytics partners receiving precise geolocation data must be identified and assessed for compliance with applicable state laws. Data processing agreements should restrict secondary use of location data for purposes beyond those disclosed to consumers. Procurement teams should verify that location data vendors implement data minimization and deletion protocols. COMPLIANCE CONSIDERATIONS: The policy should clarify whether location data sharing with third parties is subject to opt-out or opt-in requirements in applicable jurisdictions. Consent capture mechanisms in the mobile app should be audited to ensure they meet the specificity required by state privacy laws. A data mapping exercise should document all third parties receiving precise geolocation data and the purposes for which it is used.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has authority over unfair or deceptive practices related to location data collection and sharing under Section 5 of the FTC Act
    File a complaint →
  • State AG
    State attorneys general in California, Virginia, Colorado, and other states with comprehensive privacy laws have enforcement authority over sensitive geolocation data practices
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
ePrivacy Directive
European Union
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Home Depot Privacy Policy
Entity
Home Depot
Document last updated
May 5, 2026
Tracking information
First tracked
May 8, 2026
Last verified
May 11, 2026
Record ID
CA-P-006756
Document ID
CA-D-00621
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
1d1a38598cfb78ba7acfa30a3db395e13ce7a2b27a27b998daa38fe5b4e7857f
Analysis generated
May 8, 2026 13:28 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Home Depot
Document: Home Depot Privacy Policy
Record ID: CA-P-006756
Captured: 2026-05-08 13:28:52 UTC
SHA-256: 1d1a38598cfb78ba…
URL: https://conductatlas.com/platform/home-depot/home-depot-privacy-policy/precise-geolocation-data-collection/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Home Depot's Precise Geolocation Data Collection clause do?

Precise geolocation data can reveal sensitive details about your daily movements, routines, and personal life, and is classified as sensitive personal information under CPRA and several other state privacy laws.

How does this clause affect you?

If you use the Home Depot app and have location permissions enabled, your precise location data may be collected and used for personalization, advertising, and analytics, and may be shared with third-party partners.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 9 platforms. See the full comparison.

Is ConductAtlas affiliated with Home Depot?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Home Depot.