Strava · Strava Privacy Policy · View original document ↗

Contact Syncing and Social Data Collection

Medium severity Unique · 0 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Strava Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

If you grant Strava permission, it will regularly access and store contacts from your phone or social media accounts to help you find other Strava users.

This analysis describes what Strava's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Strava can collect and store the personal information of people in your contacts who have never signed up for Strava or agreed to its privacy policy.

Consumer impact (what this means for users)

Strava collects highly sensitive personal data including precise GPS location history, health metrics (heart rate, HRV, VO2max), and biometric data, which is used for AI training, advertising personalization, and aggregated into publicly visible features like the Global Heatmap. Your activity data may be shared with third-party advertising partners, though Strava commits not to use health data for advertising. You can adjust your data sharing and visibility settings by navigating to Privacy Controls in the Strava app settings, and can request data deletion by visiting strava.com/athlete/delete_your_account.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Export Your Data
    Go to your device Settings, find Strava under Contacts permissions, and revoke access to prevent Strava from reading and storing your contacts.

Cross-platform context

See how other platforms handle Contact Syncing and Social Data Collection and similar clauses.

Compare across platforms →

Monitoring

Strava has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

Collection of third-party contact data raises GDPR Article 6 lawful basis and Article 14 (indirect collection) transparency obligations; compliance teams should confirm that Strava's notice to data subjects whose information is collected via contact sync is adequate.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has taken action against companies that collect contacts data without adequate disclosure and consent under consumer protection statutes.
    File a complaint →

Provision details

Document information
Document
Strava Privacy Policy
Entity
Strava
Document last updated
May 5, 2026
Tracking information
First tracked
March 24, 2026
Last verified
March 24, 2026
Record ID
CA-P-00272008
Document ID
CA-D-00272
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
99a34943ad64442e7d68f3f6bffd5e9bfc5690540511c7def4720cfd5baead62
Analysis generated
March 24, 2026 07:45 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Strava
Document: Strava Privacy Policy
Record ID: CA-P-00272008
Captured: 2026-03-24 07:45:21 UTC
SHA-256: 99a34943ad64442e…
URL: https://conductatlas.com/platform/strava/strava-privacy-policy/contact-syncing-and-social-data-collection/
Accessed: June 10, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Strava's Contact Syncing and Social Data Collection clause do?

Strava can collect and store the personal information of people in your contacts who have never signed up for Strava or agreed to its privacy policy.

Is ConductAtlas affiliated with Strava?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Strava.