This analysis describes what Ro's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This right is consequential because it gives users a legal mechanism to restrict how their sensitive personal information is processed, but only when that information is being used for the specific purposes the CCPA identifies.
Interpretive note: The excerpt does not specify which 'certain purposes' trigger the limitation right, leaving the scope of the right undefined within this clause. The claim preserves that ambiguity rather than resolving it.
The updated policy now explicitly states that conversations with Ro's AI-powered patient support agent are recorded. Ro and its service providers may review and analyze these conversations to monitor quality and safety, improve the patient support agent and services, and understand patient experience. This disclosure clarifies a practice that was not previously described in the policy, and applies to any user who interacts with the AI patient support agent.
View change record →The updated policy establishes contractual restrictions on how advertising partners can use personal information in certain states, limiting their ability to build profiles or personalize advertising for other businesses. Ro has enabled settings with advertising partners that require them to act as service providers or processors for residents of covered states, meaning those partners may only use the information to deliver Ro's advertising and measure its performance. The policy also expands the states where residents have the right to appeal if Ro denies their information requests, and clarifies that opt-out choices must be applied separately on each browser or device. You can opt out of targeted advertising through the 'Your Privacy Choices' page or by using the Global Privacy Control.
View change record →As a user, you may have the right under the CCPA to limit Ro's use or disclosure of your sensitive personal information, subject to whether it is being used for the purposes the CCPA specifies.
How other platforms handle this
The CCPA provides California residents specific rights to delete their personal data that we collected from them and retained, subject to certain exceptions (the "right to delete").
Right to Know: The right to request details about the Personal Information we collect, use, or disclose, as well as information about our data practices.
The right to request that we disclose to you the personal information we collect, use, or disclose about you, and information about our data practices.
"The CCPA also allows you to limit the use or disclosure of your "sensitive personal information" (as defined in the CCPA) if your sensitive personal information is used for certain purposes.Excerpt from Ro's Privacy Policy
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This right is consequential because it gives users a legal mechanism to restrict how their sensitive personal information is processed, but only when that information is being used for the specific purposes the CCPA identifies.
As a user, you may have the right under the CCPA to limit Ro's use or disclosure of your sensitive personal information, subject to whether it is being used for the purposes the CCPA specifies.
ConductAtlas has identified this type of provision across 277 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Ro.