When you pay for a Medium subscription or other purchase, Medium collects your card number and billing details and passes this through a third-party payment processor.
This analysis describes what Medium's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Your financial data is involved in this transaction, and understanding that it flows through a third-party processor helps you assess the security and privacy risks associated with paying on the platform.
The updated policy states that Medium and its vendors may scan, analyze, and review your content, messages, AI interactions, and associated metadata. Data sharing now explicitly includes information you submitted or posted through the service, extending beyond infrastructure support to machine learning model training and improvement. The policy does not indicate an opt-out mechanism or granular user control over this specific use of content.
View change record →Removal of dedicated payment data processing clause may indicate integration of payment details into broader data collection scope, reducing transparency about payment-specific handling.
View full change record →Your credit or debit card number and billing address are collected at the time of payment and processed by a third-party payment company, meaning your financial data is subject to both Medium's and the payment processor's privacy and security practices.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
To stop us collecting your location information, you can update your device settings, stop using the Service, or uninstall our mobile apps.
"If you make a payment on Medium, we collect your payment information, including your credit or debit card number, billing address, and other information necessary to process your payment. We use third-party payment processors to handle payment transactions on our behalf.Excerpt from Medium's Privacy Policy
REGULATORY LANDSCAPE: Payment data collection and processing implicates PCI DSS compliance standards for card data security, as well as applicable state consumer protection laws regarding financial data.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Your financial data is involved in this transaction, and understanding that it flows through a third-party processor helps you assess the security and privacy risks associated with paying on the platform.
Your credit or debit card number and billing address are collected at the time of payment and processed by a third-party payment company, meaning your financial data is subject to both Medium's and the payment processor's privacy and security practices.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Medium.