State Farm can strip identifying details from your personal information and then share or sell that processed data with outside companies for business and commercial analysis purposes.
This analysis describes what State Farm's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The standard applied to de-identification is described only as 'reasonable efforts,' which may not meet the specific technical thresholds required under some state privacy laws; data shared with unaffiliated entities under this provision falls outside the policy's stated non-sale commitment.
Interpretive note: The 'reasonable efforts' de-identification standard is not defined in the document, and whether it satisfies applicable state privacy law thresholds depends on jurisdiction-specific technical requirements and enforcement interpretation.
Your personal information may be converted into a form State Farm considers de-identified and then shared broadly with third parties for commercial purposes, with the specific de-identification standard and downstream use controls not detailed in this document.
How other platforms handle this
Protect us, our business, our users, and others, for example to enforce our terms of service, prevent spam or other unwanted communications, and investigate or protect against fraud
we may use, retain or share information with law enforcement or others in circumstances where a person's vital interests require protection, such as in the case of emergencies.
Third-party apps use data from Gemini consistent with their own privacy policies and terms.
"develop either anonymized data or de-identified data by making reasonable efforts to remove personally identifiable information so the information is no longer customer information. We develop this data for certain purposes, such as analysis to understand more about our customers and our industry, or for other commercial purposes as permitted by law. We share and use this data within our State Farm family of companies, with third party service providers, or with other unaffiliated entities.Excerpt from State Farm's Privacy Policy
REGULATORY LANDSCAPE: This provision engages the CPRA, which defines de-identified data with specificity and imposes technical and organizational requirements; the policy's 'reasonable efforts' standard may not satisfy CPRA's de-identification criteria.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The standard applied to de-identification is described only as 'reasonable efforts,' which may not meet the specific technical thresholds required under some state privacy laws; data shared with unaffiliated entities under this provision falls outside the policy's stated non-sale commitment.
Your personal information may be converted into a form State Farm considers de-identified and then shared broadly with third parties for commercial purposes, with the specific de-identification standard and downstream use controls not detailed in this document.
ConductAtlas has identified this type of provision across 287 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by State Farm.