Strava requires access to your device's precise GPS location to use its core features like activity tracking and route mapping, though you can revoke this permission in your device settings at any time.
This analysis describes what Strava's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The operational significance is that precise location data collection is a functional prerequisite for the service's primary features rather than an optional data practice. This creates a direct connection between location permission authorization and feature availability.
Using Strava's core features requires granting continuous access to your precise GPS location, which creates a detailed record of your physical movements that Strava stores and processes for multiple purposes including AI training and public features.
How other platforms handle this
In some jurisdictions, we only use non-essential cookies after obtaining your consent.
to the extent that Internet Protocol (IP) addresses or similar identifiers are considered personal data by local law, we also treat these identifiers as personal data in those regions.
You may give us your Identity Data, Contact Data, Financial Data, Profile Data, and other information by filling in forms or by corresponding with us by post, phone, e-mail or otherwise.
"We collect or infer location information when you sign up for and use the Services. For our core features to function (e.g., GPS activity tracking, routes, segments), you must grant us permission through your device to track your device's precise location. You can stop sharing precise location at any time with your device settings.Excerpt from Strava's Privacy Policy
REGULATORY FRAMEWORK: Precise geolocation is classified as sensitive personal information under CPRA §1798.140(ae)(1)(C), requiring a right to limit use and disclosure; consumers must be notified at or before collection.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The operational significance is that precise location data collection is a functional prerequisite for the service's primary features rather than an optional data practice. This creates a direct connection between location permission authorization and feature availability.
Using Strava's core features requires granting continuous access to your precise GPS location, which creates a detailed record of your physical movements that Strava stores and processes for multiple purposes including AI training and public features.
ConductAtlas has identified this type of provision across 296 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Strava.