T-Mobile keeps your personal data for as long as it needs to for business and legal reasons, and says it will securely dispose of data it no longer needs.
This analysis describes what T-Mobile's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Open-ended retention language tied to 'business needs' and 'legal obligations' without specific retention periods means consumers have limited visibility into how long sensitive data such as location records, call logs, and financial information is actually stored.
Interpretive note: Whether the policy's retention language satisfies CPRA's requirement to disclose specific retention periods or criteria for each data category is a compliance question that depends on regulatory interpretation and enforcement guidance.
Previous version lacked specific details; current version now provides comprehensive explanation of retention periods and secure disposal practices.
View full change record →The policy does not specify concrete retention periods for individual data categories, meaning location history, call records, and financial data may be retained for extended periods without a defined end date; consumers cannot easily predict when their data will be deleted.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"We retain personal information for as long as necessary to provide you with our services, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. When we no longer need to retain your information, we will dispose of it in a secure manner.Excerpt from T-Mobile's Privacy Policy
REGULATORY LANDSCAPE: While the policy does not specify retention periods, the FCC's CPNI rules impose specific retention and security requirements for call detail records, and the CPRA requires businesses to disclose their retention practices with …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Open-ended retention language tied to 'business needs' and 'legal obligations' without specific retention periods means consumers have limited visibility into how long sensitive data such as location records, call logs, and financial information is actually stored.
The policy does not specify concrete retention periods for individual data categories, meaning location history, call records, and financial data may be retained for extended periods without a defined end date; consumers cannot easily predict when their data will be deleted.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by T-Mobile.