Strava · Strava Privacy Policy · View original document ↗

Flyby and Live Location Sharing with Other Users

High severity Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Strava Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Strava offers features like Beacon that share your live GPS location with other users in real time, and separately the Flyby feature shows when your activity route crossed paths with other users' routes.

This analysis describes what Strava's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision establishes the operational framework for peer-to-peer location sharing functionality. It clarifies that Strava processes and transmits live location data only when users affirmatively enable sharing features, distinguishing this data practice from other location data uses.

Consumer impact (what this means for users)

Features like Beacon (live location sharing) and Flyby (retrospective route crossing data) can expose your physical location to other Strava users, and if not reviewed and disabled, may share your location with strangers or unwanted contacts.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Opt Out of Arbitration
    In Strava privacy settings, navigate to 'Flyby' and set it to 'No One' to prevent others from seeing when your activity intersected with theirs. Review Beacon settings separately and only enable live location sharing when intentionally using the safety feature.

How other platforms handle this

Airbnb Medium

We collect information about your precise or approximate location as determined through data such as your IP address, GPS, and other inputs from your device, with your permission where required. We may use this information to provide, personalize, and improve our services, and for safety purposes.

Anthropic Medium

Device and Connection Information. Consistent with your device or browser permissions, your device or browser automatically sends us information about when and how you install, access, or use our Services. This includes information such as your device type, operating system information, browser info...

Uber Medium

Uber collects precise or approximate location data from riders' and order recipients' mobile devices when the Uber app is running in the foreground (app open and on-screen) or background (app open but not on-screen) of their device. Uber collects this data from the time a ride or order is requested ...

See all platforms with this clause type →

Monitoring

Strava has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We also use your live location data, which you may choose to share with other users, such as when using Strava Beacon.

— Excerpt from Strava's Strava Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY FRAMEWORK: Real-time location sharing with third-party users implicates GDPR Art. 6(1)(a) consent requirements and Art. 9 where location reveals health patterns. Under CCPA/CPRA, live location data is sensitive personal information under §1798.140(ae)(1)(C). US state stalking and location tracking statutes (California Penal Code §646.9, Illinois Stalking laws) create a legal environment where inadequate safety controls on location sharing could expose Strava to liability. VAWA (Violence Against Women Act) and FTC guidance on intimate partner surveillance are relevant regulatory touchpoints. GDPR Art. 25 (privacy by design) requires that the most privacy-protective defaults be applied — defaulting Flyby to 'on' for all users would likely violate this principle.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has issued guidance on location tracking and stalkerware, and has authority over unfair practices where platform features enable non-consensual location surveillance without adequate safety controls.
    File a complaint →

Applicable regulations

BIPA
Illinois, USA
CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
ePrivacy Directive
European Union
FTC Act Section 5
United States Federal
GDPR
European Union
HIPAA
United States Federal
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
UK GDPR
United Kingdom
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Strava Privacy Policy
Entity
Strava
Document last updated
May 5, 2026
Tracking information
First tracked
May 7, 2026
Last verified
May 7, 2026
Record ID
CA-P-004932
Document ID
CA-D-00272
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
a0dee42f2c4ab44ff62ed59163cb495a9cd4b5c0dc733b68d4ce9c4b4cd0a61f
Analysis generated
May 7, 2026 14:19 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Strava
Document: Strava Privacy Policy
Record ID: CA-P-004932
Captured: 2026-05-07 14:19:58 UTC
SHA-256: a0dee42f2c4ab44f…
URL: https://conductatlas.com/platform/strava/strava-privacy-policy/flyby-and-live-location-sharing-with-other-users/
Accessed: May 20, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Strava's Flyby and Live Location Sharing with Other Users clause do?

This provision establishes the operational framework for peer-to-peer location sharing functionality. It clarifies that Strava processes and transmits live location data only when users affirmatively enable sharing features, distinguishing this data practice from other location data uses.

How does this clause affect you?

Features like Beacon (live location sharing) and Flyby (retrospective route crossing data) can expose your physical location to other Strava users, and if not reviewed and disabled, may share your location with strangers or unwanted contacts.

Is ConductAtlas affiliated with Strava?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Strava.