The policy states that Meta collects location data including precise device location (where permitted), IP-based location, and location inferred from user activity such as check-ins and events, and uses this data across the purposes described in the policy including advertising.
This analysis describes what Meta's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that Meta collects multiple categories of location data, ranging from precise GPS-level device location to inferred location from social activity, and applies this data to advertising and personalization purposes across Meta's products.
The updated Privacy Policy no longer explicitly directs US residents to the United States Regional Privacy Notice, which previously provided details about consumer privacy rights available under state laws like the California Consumer Privacy Act and similar regulations. This removal does not eliminate those rights themselves, but it makes the Privacy Policy less clear about where consumers can find information on how to exercise those rights. Consumers can still locate the Regional Privacy Notice through Meta's website or by searching for it directly, but the removal reduces the accessibility and prominence of that guidance within the primary policy document.
View change record →Under this clause, Meta collects precise device location data when users grant permission, as well as IP-based and activity-inferred location data, and uses these location signals for purposes including targeted advertising, content personalization, and safety features.
How other platforms handle this
We collect information about your location, such as data from your device's GPS or IP address, when you use our products.
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
If we collect health information from these integrations (such as heart rate), we will not sell or use it for advertising or other similar purposes; we do not disclose it to third parties without your prior consent; and we will only use it for the specific purposes described in this Policy.
Monitoring
Meta has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Location-related information: We use location-related information – such as your current location, where you live, the places you go, and the businesses and people near you – for the purposes described below. Location-related information can be based on things like precise device location (if you've allowed us to collect it), IP addresses, and information from your and others' use of Meta Products (such as check-ins or events you attend).— Excerpt from Meta's Meta Privacy Policy
(1) REGULATORY LANDSCAPE: Precise location data collection and use for advertising engages GDPR Article 6 lawful basis requirements and may implicate ePrivacy Directive provisions on terminal equipment data in EU jurisdictions. The FTC has issued enforcement guidance on deceptive location data practices under Section 5 of the FTC Act. CCPA/CPRA classifies precise geolocation as sensitive personal information subject to opt-out and use limitation rights for California users. Illinois and other states have enacted location privacy protections that may impose additional constraints. (2) GOVERNANCE EXPOSURE: Medium. Location data collection is subject to increasing regulatory focus globally, particularly for advertising use cases. The collection of precise location requires explicit device-level permission, but IP and activity-based location collection occurs without a separate permission step, which may warrant review in privacy-sensitive contexts. (3) JURISDICTION FLAGS: California (CPRA sensitive personal information provisions), the EU and EEA (GDPR and ePrivacy Directive), and Illinois represent heightened exposure jurisdictions for location data practices. The combination of precise and inferred location data may require evaluation under applicable sensitive data frameworks. (4) CONTRACT AND VENDOR IMPLICATIONS: Advertisers using location-based targeting on Meta's platform should assess whether their use of location-targeted audiences is consistent with their own user consent frameworks and applicable state location privacy laws. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should assess whether the collection of IP-based and activity-inferred location data falls within the scope of sensitive personal information under CPRA and whether appropriate opt-out mechanisms are surfaced to California users. EU DPOs should evaluate whether location data processing for advertising satisfies the necessity and proportionality requirements under GDPR Article 5.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 3 platforms + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes that Meta collects multiple categories of location data, ranging from precise GPS-level device location to inferred location from social activity, and applies this data to advertising and personalization purposes across Meta's products.
Under this clause, Meta collects precise device location data when users grant permission, as well as IP-based and activity-inferred location data, and uses these location signals for purposes including targeted advertising, content personalization, and safety features.
ConductAtlas has identified this type of provision across 20 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Meta.