10 Total
2 High severity
6 Medium severity
2 Low severity
Summary

This document establishes Waze's data collection and sharing practices for users of its navigation application. The policy authorizes collection of precise GPS location, driving routes, speed, search destinations, and device identifiers while the app is active, with provisions for sharing this data with Google and third-party analytics and advertising partners, including potential combination with user activity across other Google products. For users who enable the Carpooling feature, the policy authorizes access to contact information.

Technical / Legal Breakdown

This document is Waze Mobile Limited's privacy policy governing data collection, use, and sharing across the Waze navigation app, website (www.waze.com), and related community-based mapping services, with stated legal bases including consent, legitimate interests, and contractual necessity depending on applicable jurisdiction. The policy states that Waze collects precise GPS location data (including background location when the app is open), device identifiers, IP addresses, driving behavior data (speed, routes, time of travel), user-generated map edits, search queries, contacts (when users opt into Carpooling features), and communications content exchanged via in-app messaging; the terms authorize sharing this data with Google (as parent company and infrastructure provider), advertising and analytics partners, and third-party service providers. The policy authorizes Google to combine Waze-derived location and usage data with data collected across other Google services and platforms, which creates a cross-service data integration scope that is operationally distinct from standalone navigation app practices; the agreement asserts broad rights to use aggregated and anonymized data for product improvement and commercial purposes, though applicable law in relevant jurisdictions may constrain certain assertions. The policy engages GDPR and related EU/EEA data protection frameworks for European users (including rights of access, rectification, erasure, and objection), CCPA for California residents (including the right to know, delete, and opt out of sale), and COPPA given the policy's stated minimum age requirement of 16 in certain jurisdictions and 13 in others; the integration with Google's broader data ecosystem creates compliance considerations under GDPR Article 26 (joint controllership) and raises questions about the adequacy of disclosure regarding cross-service profiling.

Institutional Analysis

Institutional analysis available with Professional

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Start Professional free trial

3 important changes detected

4 versions captured · Last updated: May 2026

May 5, 2026

medium
What changed Waze updated its privacy policy on May 5, 2026 to add explicit language about collecting phone numbers from your device's contact book through the 'find friends' feature, and to clarify how social network information can be shared through the app. The policy now states that Waze periodically collects all phone numbers stored on your device to help identify other Waze users you may know, and that phone numbers are collected in a form that is initially anonymous to Waze. The updated terms also detail how you can connect your social network accounts and share profile information.
Why this matters The updated policy now explicitly discloses that Waze periodically collects all phone numbers stored on your device's contact book as part of the 'find friends' feature. According to the revised terms, these phone numbers are collected in a form that is initially anonymous to Waze and are used to help create a list of other Waze users you may know. The policy clarifies that names, addresses, and other contact information are not collected from your phone book, though such information may be saved locally on your device for local searches. Additionally, the updated terms now explicitly authorize connecting your Waze account to social network accounts and sharing profile information from those networks. You can control whether to use the 'find friends' feature and whether to connect social network accounts to your Waze account.
View full change record →
What changed Waze updated its privacy policy on April 19, 2026, removing detailed language about social network integration, the 'find friends' feature, and phone number collection, while making minor grammatical edits to other sections. The removal of these provisions eliminates specific descriptions of how Waze previously disclosed its collection of device contact information and phone numbers for friend-finding purposes. The policy now contains less explicit detail about these data practices, though the updated terms do not clearly state whether these practices have been discontinued or are simply no longer described.
Why this matters The updated policy removes explicit language describing how Waze collects phone numbers from device contact books and integrates social network accounts. Previously, the policy stated that Waze would 'periodically collect all of the phone numbers which are stored on your device's phone contacts book' and described how this information was used for the 'find friends' feature. The revised policy no longer includes these specific disclosures. This does not necessarily mean the practices have stopped, but it means the policy provides less transparency about what data Waze collects from your device and how it uses contact information. Users who relied on these detailed descriptions to understand Waze's data practices will find the updated policy less explicit on these points.
View full change record →

March 23, 2026 medium

Waze updated its privacy policy on March 23, 2026 to add explicit disclosures about social network integration and the 'find friends' feature. The updated terms now specifically describe how the …

View change record →
High — 2 provisions
Medium — 6 provisions
Low — 2 provisions

Monitoring

Waze has updated this document before.

Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →

Professional Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Professional free trial

Cross-platform context

See how other platforms handle Advertising Profiling and Personalization and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
VPPA
United States Federal
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured May 5, 2026 08:53 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000323
Version ID CA-V-002178
SHA-256 2f759e3b8bf0b5f0585db3db8e3f327e7219a871e1ce6c2e4f1fbfb47310c82d
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans