If you sign into Medium using Google, Facebook, or another third-party account, Medium receives personal information from that service about you, such as your name and email address.
This analysis describes what Medium's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Linking a third-party account to Medium means that data flows from that platform to Medium, potentially expanding the scope of personal information Medium holds about you beyond what you provided directly.
The updated policy states that Medium and its vendors may scan, analyze, and review your content, messages, AI interactions, and associated metadata. Data sharing now explicitly includes information you submitted or posted through the service, extending beyond infrastructure support to machine learning model training and improvement. The policy does not indicate an opt-out mechanism or granular user control over this specific use of content.
View change record →Removal of explicit provision on third-party linked account data collection eliminates transparency about OAuth and social login data sharing practices.
View full change record →Signing in with Google or Facebook means Medium receives your name, email, and potentially other profile data from those platforms, which is then incorporated into Medium's own data processing under this privacy policy.
How other platforms handle this
We will also provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected.
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
"If you connect a third-party service to your Medium account (for example, if you sign in using Google or Facebook), we will receive information about you from that service, such as your name, email address, and profile picture, in accordance with the authorization procedures of that service.Excerpt from Medium's Privacy Policy
REGULATORY LANDSCAPE: Collection of personal data from third-party platforms implicates GDPR Articles 13 and 14, which require transparency about the sources from which personal data is obtained.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Linking a third-party account to Medium means that data flows from that platform to Medium, potentially expanding the scope of personal information Medium holds about you beyond what you provided directly.
Signing in with Google or Facebook means Medium receives your name, email, and potentially other profile data from those platforms, which is then incorporated into Medium's own data processing under this privacy policy.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Medium.