Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that Waze may collect location and travel data even when the app is not actively in use, subject to device and account settings, for purposes including drive predictions, traffic notifications, and parking assistance.
This analysis describes what Waze's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that location data collection is not limited to active app sessions; the scope of collection depends on device-level permissions and account settings, which users must actively manage to restrict.
The updated policy now applies to users of any age by removing the prior 16+ requirement, but does not explicitly state whether parental consent is required for minors. The policy defines Personal Information more broadly to include location, route information, and data reasonably linked to you by Waze. The company removed documentation of the 'find friends' feature that previously collected phone numbers from device contacts, suggesting that feature is no longer active or has been redesigned. Privacy controls remain available through in-app settings where you can adjust which Personal Information Waze collects and how it is used.
View change record →The updated policy now explicitly discloses that Waze periodically collects all phone numbers stored on your device's contact book as part of the 'find friends' feature. According to the revised terms, these phone numbers are collected in a form that is initially anonymous to Waze and are used to help create a list of other Waze users you may know. The policy clarifies that names, addresses, and other contact information are not collected from your phone book, though such information may be saved locally on your device for local searches. Additionally, the updated terms now explicitly authorize connecting your Waze account to social network accounts and sharing profile information from those networks. You can control whether to use the 'find friends' feature and whether to connect social network accounts to your Waze account.
View change record →The updated policy removes explicit language describing how Waze collects phone numbers from device contact books and integrates social network accounts. Previously, the policy stated that Waze would 'periodically collect all of the phone numbers which are stored on your device's phone contacts book' and described how this information was used for the 'find friends' feature. The revised policy no longer includes these specific disclosures. This does not necessarily mean the practices have stopped, but it means the policy provides less transparency about what data Waze collects from your device and how it uses contact information. Users who relied on these detailed descriptions to understand Waze's data practices will find the updated policy less explicit on these points.
View change record →Under this clause, Waze may collect location information continuously in the background depending on how device location permissions are configured. Users who wish to limit collection to active app sessions should review and adjust device-level location settings.
Cross-platform context
See how other platforms handle Background Location Collection When App Is Not In Use and similar clauses.
Compare across platforms →Monitoring
Waze has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"depending on your selected device settings and/or your account settings, we may collect information about your location and travel (or lack thereof) even when you are not using the app, to tell you when to leave for planned or predicted drives, notify you about bad traffic in your area, provide you parking assistance, and moreExcerpt from Waze's Privacy Policy
1) REGULATORY LANDSCAPE: Continuous background location collection engages GDPR Article 5 data minimization principles, LGPD proportionality requirements, and FTC fair information practice standards. Under GDPR, background location processing may require a clearly articulated legal basis and purpose limitation analysis, particularly where collection occurs outside active user engagement. Enforcement authorities include EU data protection authorities, the UK ICO, Brazil's ANPD, and the FTC. 2) GOVERNANCE EXPOSURE: Medium. The policy discloses background location collection as conditional on device and account settings, but does not specify the default state of this collection or the granularity of controls available to users. The adequacy of consent or legitimate interests as a processing basis for background location data warrants review, particularly under GDPR and LGPD where sensitive location data processing is subject to heightened scrutiny. 3) JURISDICTION FLAGS: EU and UK users have explicit rights under GDPR and UK GDPR to object to processing and to request restriction, including for background location data. Brazilian users have equivalent rights under LGPD. California residents may have CCPA-related rights regarding collection of geolocation data, though the policy does not explicitly reference CCPA. Illinois and other states with biometric or location-specific statutes may create additional exposure depending on how background location data is used. 4) CONTRACT AND VENDOR IMPLICATIONS: Organizations deploying Waze on managed devices or permitting employee use should assess whether background location collection is consistent with employee privacy policies and applicable workplace privacy laws. Vendor assessments should include evaluation of whether device management policies can effectively restrict background location permissions at the enterprise level. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should evaluate whether the purpose specification for background location collection meets the specificity required under GDPR and LGPD transparency obligations, whether the legitimate interests assessment for this processing is documented, and whether user-facing controls for restricting background collection are sufficiently prominent and accessible.
This provision establishes that location data collection is not limited to active app sessions; the scope of collection depends on device-level permissions and account settings, which users must actively manage to restrict.
Under this clause, Waze may collect location information continuously in the background depending on how device location permissions are configured. Users who wish to limit collection to active app sessions should review and adjust device-level location settings.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Waze.