The policy states that Medium collects account registration data including name, email address, password, and payment method information directly from users, and separately collects device identifiers, IP addresses, browser type, operating system, referral URLs, and behavioral data such as reading history and search queries through automated means.
This analysis describes what Medium's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the categories of personal data Medium collects across both direct user input and automated technical collection, which determines the scope of data subject rights requests under GDPR and CCPA and informs the data mapping obligations of any organization assessing Medium as a data processor or service.
The updated policy states that Medium and its vendors may scan, analyze, and review your content, messages, AI interactions, and associated metadata. Data sharing now explicitly includes information you submitted or posted through the service, extending beyond infrastructure support to machine learning model training and improvement. The policy does not indicate an opt-out mechanism or granular user control over this specific use of content.
View change record →Removal of this specific data collection scope provision means the current policy no longer explicitly lists the categories of directly-provided personal data (name, email, payment info), reducing granular transparency about what data Medium collects.
View full change record →New provision explicitly enumerates specific personal data points collected, providing users with transparent detail about what information Medium gathers.
View full change record →The agreement establishes that Medium collects identifiers, payment information, reading and browsing activity, device data, and inferred interests, forming the data set subject to user rights requests for access, correction, or deletion under applicable law.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
To stop us collecting your location information, you can update your device settings, stop using the Service, or uninstall our mobile apps.
"We collect information you provide to us directly, such as when you create or modify your account, sign up for and use our Services, contact us for support, or otherwise communicate with us. This information may include: name, email address, password, account settings and preferences, payment method information (e.g., your credit card number) and other account registration information.Excerpt from Medium's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes the categories of personal data Medium collects across both direct user input and automated technical collection, which determines the scope of data subject rights requests under GDPR and CCPA and informs the data mapping obligations of any organization assessing Medium as a data processor or service.
The agreement establishes that Medium collects identifiers, payment information, reading and browsing activity, device data, and inferred interests, forming the data set subject to user rights requests for access, correction, or deletion under applicable law.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Medium.