Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The policy states that Meta collects location data including precise device location (where permitted), IP-based location, and location inferred from user activity such as check-ins and events, and uses this data across the purposes described in the policy including advertising.
This analysis describes what Meta's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that Meta collects multiple categories of location data, ranging from precise GPS-level device location to inferred location from social activity, and applies this data to advertising and personalization purposes across Meta's products.
The updated Privacy Policy no longer explicitly directs US residents to the United States Regional Privacy Notice, which previously provided details about consumer privacy rights available under state laws like the California Consumer Privacy Act and similar regulations. This removal does not eliminate those rights themselves, but it makes the Privacy Policy less clear about where consumers can find information on how to exercise those rights. Consumers can still locate the Regional Privacy Notice through Meta's website or by searching for it directly, but the removal reduces the accessibility and prominence of that guidance within the primary policy document.
View change record →Under this clause, Meta collects precise device location data when users grant permission, as well as IP-based and activity-inferred location data, and uses these location signals for purposes including targeted advertising, content personalization, and safety features.
How other platforms handle this
To stop us collecting your location information, you can update your device settings, stop using the Service, or uninstall our mobile apps.
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Monitoring
Meta has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Location-related information: We use location-related information – such as your current location, where you live, the places you go, and the businesses and people near you – for the purposes described below. Location-related information can be based on things like precise device location (if you've allowed us to collect it), IP addresses, and information from your and others' use of Meta Products (such as check-ins or events you attend).Excerpt from Meta's Privacy Policy
(1) REGULATORY LANDSCAPE: Precise location data collection and use for advertising engages GDPR Article 6 lawful basis requirements and may implicate ePrivacy Directive provisions on terminal equipment data in EU jurisdictions. The FTC has issued enforcement guidance on deceptive location data practices under Section 5 of the FTC Act. CCPA/CPRA classifies precise geolocation as sensitive personal information subject to opt-out and use limitation rights for California users. Illinois and other states have enacted location privacy protections that may impose additional constraints. (2) GOVERNANCE EXPOSURE: Medium. Location data collection is subject to increasing regulatory focus globally, particularly for advertising use cases. The collection of precise location requires explicit device-level permission, but IP and activity-based location collection occurs without a separate permission step, which may warrant review in privacy-sensitive contexts. (3) JURISDICTION FLAGS: California (CPRA sensitive personal information provisions), the EU and EEA (GDPR and ePrivacy Directive), and Illinois represent heightened exposure jurisdictions for location data practices. The combination of precise and inferred location data may require evaluation under applicable sensitive data frameworks. (4) CONTRACT AND VENDOR IMPLICATIONS: Advertisers using location-based targeting on Meta's platform should assess whether their use of location-targeted audiences is consistent with their own user consent frameworks and applicable state location privacy laws. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should assess whether the collection of IP-based and activity-inferred location data falls within the scope of sensitive personal information under CPRA and whether appropriate opt-out mechanisms are surfaced to California users. EU DPOs should evaluate whether location data processing for advertising satisfies the necessity and proportionality requirements under GDPR Article 5.
Regulatory citations, enforcement risk, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
This provision establishes that Meta collects multiple categories of location data, ranging from precise GPS-level device location to inferred location from social activity, and applies this data to advertising and personalization purposes across Meta's products.
Under this clause, Meta collects precise device location data when users grant permission, as well as IP-based and activity-inferred location data, and uses these location signals for purposes including targeted advertising, content personalization, and safety features.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Meta.