Provision record
Stash · Stash Privacy Policy · View original document ↗

Personal Information Collected from Third-Party Sources

Medium severity Explicit document language Common · 296 of 352 platforms
Stay ahead of the changes
Track Stash and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF

This analysis describes what Stash's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

Clause Stability Stable

0
Changes
4
Months Monitored
Jul 10, 2026
First Seen
Jul 10, 2026
Last Seen
This clause type exists across 4186 other provisions on other platforms.

How other platforms handle this

Baseten Medium

Category A: Identifiers. Examples: A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, driver's license number, passport number... Collected: Yes.

Instacart Medium

you may refer a friend to Instacart or send an Instacart gift delivery or gift card to someone. In these cases, we collect the recipient's name, email, and delivery address, as applicable.

GitHub Medium

We collect data about your interactions with the Services, such as IP address, device information, session details, date and time of requests, device type and ID, operating system and application version...

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
We may also collect Personal Information about you from third-party sources, such as banking verification services, consumer reporting agencies, unaffiliated third-party service providers, brokers, banks, or government databases.

Excerpt from Stash's Privacy Policy

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FCRA
United States Federal
FTC Act Section 5
United States Federal
GLBA
United States Federal
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Stash Privacy Policy
Entity
Stash
Document last updated
March 14, 2026
Tracking information
First tracked
March 15, 2026
Last verified
May 9, 2026
Record ID
CA-P-020941
Document ID
CA-D-00061
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
c314a917a32611f62e28ff71b79a50309bf3c87dea6cc7bd197833b0719565f8
Analysis generated
March 15, 2026 10:51 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Stash
Document: Stash Privacy Policy
Record ID: CA-P-020941
Captured: 2026-03-15 10:51:58 UTC
SHA-256: c314a917a32611f6…
URL: https://conductatlas.com/platform/stash/stash-privacy-policy/provision/CA-P-020941/personal-information-collected-from-third-party-sources/
Accessed: Aug. 6, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Stash's Personal Information Collected from Third-Party Sources clause do?

The clause states: “We may also collect Personal Information about you from third-party sources, such as banking verification services, consumer reporting agencies, unaffiliated third-party service providers, brokers, banks, or government databases.”

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 296 platforms. See the full comparison.

Is ConductAtlas affiliated with Stash?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Stash.