Home Depot may collect your precise physical location through its mobile app or website if you grant permission, as well as your general location from your IP address.
This analysis describes what Home Depot's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Precise geolocation data can reveal sensitive details about your daily movements, routines, and personal life, and is classified as sensitive personal information under CPRA and several other state privacy laws.
If you use the Home Depot app and have location permissions enabled, your precise location data may be collected and used for personalization, advertising, and analytics, and may be shared with third-party partners.
How other platforms handle this
Geolocation Information
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
If we collect health information from these integrations (such as heart rate), we will not sell or use it for advertising or other similar purposes; we do not disclose it to third parties without your prior consent; and we will only use it for the specific purposes described in this Policy.
Monitoring
Home Depot has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Geolocation data. We may collect precise geolocation data (i.e., your specific location, as contrasted with your general location) when you use our mobile applications or visit our websites, if you permit us to do so. We may also collect general location information (such as the city or region you are in) from your IP address or other sources.— Excerpt from Home Depot's Home Depot Privacy Policy
REGULATORY LANDSCAPE: Precise geolocation is classified as sensitive personal information under CPRA, which requires that consumers be given the right to limit the use and disclosure of such data. Several additional state privacy laws including those in Virginia, Colorado, Connecticut, and Texas also treat precise geolocation as sensitive data requiring heightened consent or opt-in mechanisms. The FTC has taken enforcement actions against companies that collect and share location data without adequate consumer notice. GOVERNANCE EXPOSURE: Medium. The policy conditions precise geolocation collection on user permission, which partially mitigates exposure, but the adequacy of the consent interface (opt-in vs. opt-out, clarity of disclosure at point of collection) should be evaluated against each applicable state framework. Sharing precise location data with advertising or analytics partners may require additional disclosures or restrictions. JURISDICTION FLAGS: California (CPRA sensitive data), Colorado (Colorado Privacy Act), Virginia (Consumer Data Protection Act), Washington (My Health MY Data Act for health-related location data), and Illinois create varying levels of heightened obligation. The policy's reference to user permission does not specify whether this constitutes opt-in consent as required by some state laws. CONTRACT AND VENDOR IMPLICATIONS: Third-party advertising and analytics partners receiving precise geolocation data must be identified and assessed for compliance with applicable state laws. Data processing agreements should restrict secondary use of location data for purposes beyond those disclosed to consumers. Procurement teams should verify that location data vendors implement data minimization and deletion protocols. COMPLIANCE CONSIDERATIONS: The policy should clarify whether location data sharing with third parties is subject to opt-out or opt-in requirements in applicable jurisdictions. Consent capture mechanisms in the mobile app should be audited to ensure they meet the specificity required by state privacy laws. A data mapping exercise should document all third parties receiving precise geolocation data and the purposes for which it is used.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Precise geolocation data can reveal sensitive details about your daily movements, routines, and personal life, and is classified as sensitive personal information under CPRA and several other state privacy laws.
If you use the Home Depot app and have location permissions enabled, your precise location data may be collected and used for personalization, advertising, and analytics, and may be shared with third-party partners.
ConductAtlas has identified this type of provision across 10 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Home Depot.