This analysis describes what Indeed's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Collection of demographic data is conditioned on both user consent and legal permissibility in the relevant market, meaning neither condition alone is sufficient.
Interpretive note: The excerpt does not define what data is referred to by 'this data'; the clause name indicates it is demographic data, but the excerpt alone does not specify the data type. The canonical claim relies on the clause name for that identification.
The updated terms authorize Indeed to process personal data for a broader range of purposes, including fraud, abuse, platform-security threats, and risks to users or the public. The policy now explicitly states that Indeed may share information with law enforcement, regulators, and government authorities where lawful and appropriate, including in cases where sharing is voluntary rather than in response to compulsory legal process. For job seekers, device information is now included when applications are transferred to employers' systems, such as applicant tracking systems or scheduling platforms.
View change record →The updated policy explicitly includes phone number as a type of device information that Indeed collects. Previously, the policy described device information as limited to IP address, device ID, and user agent. Additionally, the policy now states that Indeed relies on legitimate interests not only for keeping sites safe and secure, but also for 'improving our Sites and services', which broadens the stated basis for processing personal data. These changes formalize expanded data collection categories and processing justifications under the same legal framework.
View change record →Users must consent before Indeed collects their demographic data, and collection can only occur in markets where it is legally permitted.
How other platforms handle this
telemetry information collected includes: (i) microservice settings, (ii) usage data and (iii) hardware environment.
Partners who have implemented or integrated certain Instacart services on their websites or applications may also let us collect information about your use of their sites or applications or share such information with us.
We will only collect, use and disclose your personal data with your consent, unless otherwise permitted or required by law. Your consent may be given expressly or implied, depending on the circumstances and the sensitivity of the information involved.
"We only collect this data with your consent, and only in markets where such collection is permitted.Excerpt from Indeed's Privacy Policy
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Collection of demographic data is conditioned on both user consent and legal permissibility in the relevant market, meaning neither condition alone is sufficient.
Users must consent before Indeed collects their demographic data, and collection can only occur in markets where it is legally permitted.
ConductAtlas has identified this type of provision across 296 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Indeed.