If you use the Waze Carpooling feature, the app may access your phone's contact list and collect detailed trip information including your exact pick-up and drop-off locations and any messages exchanged between you and your driver or rider.
This analysis describes what Waze's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes access to contact lists and collection of communications content as a condition of using the Carpooling feature, extending data collection beyond navigation use to include third-party personal data (your contacts) and interpersonal communications.
Interpretive note: The policy does not specify the legal basis under GDPR for processing personal data of contacts who are not Waze users, creating ambiguity about compliance with GDPR's lawful basis requirements for third-party data.
The updated policy now applies to users of any age by removing the prior 16+ requirement, but does not explicitly state whether parental consent is required for minors. The policy defines Personal Information more broadly to include location, route information, and data reasonably linked to you by Waze. The company removed documentation of the 'find friends' feature that previously collected phone numbers from device contacts, suggesting that feature is no longer active or has been redesigned. Privacy controls remain available through in-app settings where you can adjust which Personal Information Waze collects and how it is used.
View change record →New provision disclosing that carpooling functionality requires access to user contacts and collects sensitive trip endpoints and rider-driver communications not previously detailed.
View full change record →Users who enable Carpooling consent to Waze accessing their contacts list (which contains information about people who may not themselves be Waze users) and collecting pick-up and drop-off addresses and driver-rider communications; users who do not use Carpooling are not subject to this provision.
How other platforms handle this
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
If you are an end user in a Workspace not owned by you and wish to update, delete, or receive any information we have about you, you may do so by contacting the organization who owns your ClickUp Workspace.
to request that your data be transferred to a third party (data portability)
"If you choose to use the Carpooling feature, we may access your contacts list to help you connect with other users. We may also collect information about your trips, including pick-up and drop-off locations, travel times, and communications between drivers and riders.Excerpt from Waze's Privacy Policy
1) REGULATORY LANDSCAPE: Access to a user's contact list involves processing personal data of third parties (the contacts) who have not provided consent to Waze, which raises GDPR compliance questions regarding lawful basis for processing …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision authorizes access to contact lists and collection of communications content as a condition of using the Carpooling feature, extending data collection beyond navigation use to include third-party personal data (your contacts) and interpersonal communications.
Users who enable Carpooling consent to Waze accessing their contacts list (which contains information about people who may not themselves be Waze users) and collecting pick-up and drop-off addresses and driver-rider communications; users who do not use Carpooling are not subject to this provision.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Waze.