Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that Waze collects data about user activity on third-party sites and apps that are linked to a Waze account or accessed through the Waze service.
This analysis describes what Waze's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that data collection extends beyond Waze's own platform to include activity on third-party services accessed through or linked to Waze, the scope of which depends on which third-party integrations a user activates.
Interpretive note: The specific categories of third-party activity data collected and the legal basis for this collection are not enumerated in the document, creating some ambiguity about the full scope of this provision.
The updated policy now applies to users of any age by removing the prior 16+ requirement, but does not explicitly state whether parental consent is required for minors. The policy defines Personal Information more broadly to include location, route information, and data reasonably linked to you by Waze. The company removed documentation of the 'find friends' feature that previously collected phone numbers from device contacts, suggesting that feature is no longer active or has been redesigned. Privacy controls remain available through in-app settings where you can adjust which Personal Information Waze collects and how it is used.
View change record →Under this clause, when a user links third-party services such as Spotify or other integrated apps to their Waze account, Waze states it may collect data about the user's activity on those third-party platforms. Users can disconnect third-party integrations at any time through the Waze app, and the policy states that data sharing with the disconnected service will cease from the point of disconnection.
Cross-platform context
See how other platforms handle Third-Party Activity Data Collection via Linked Services and similar clauses.
Compare across platforms →Monitoring
Waze has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Your activity on third-party sites and apps that you chose to link to your Waze account or that you interact with through the Service.Excerpt from Waze's Privacy Policy
1) REGULATORY LANDSCAPE: Collection of user activity data from third-party platforms through linked account integrations engages GDPR and LGPD requirements for transparency and purpose limitation, as users may not anticipate that Waze collects data from third-party app activity. The legal basis for this collection is not separately specified in the policy. The FTC has authority over data collection practices that may not be clearly disclosed to consumers. 2) GOVERNANCE EXPOSURE: Low to Medium. The policy discloses this collection but does not enumerate which third-party data types are collected or how they are used beyond general service improvement and personalization purposes. The scope of third-party activity data collected depends on which integrations are active, creating variability in the actual data collection footprint. 3) JURISDICTION FLAGS: EU and UK users have GDPR rights to receive specific information about the categories of data collected from third-party sources under Article 14. Brazilian users have equivalent LGPD rights. The policy's general disclosure may not satisfy the specificity required by these frameworks. 4) CONTRACT AND VENDOR IMPLICATIONS: Third-party service providers integrating with Waze should evaluate whether their data sharing with Waze is consistent with their own privacy policies and user agreements. Users who link third-party accounts to Waze should note that both Waze's and the third-party's privacy policies govern data use. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should review whether the disclosure of third-party activity data collection meets GDPR Article 14 requirements for information collected from third-party sources, and whether consent or legitimate interests is the documented basis for this processing.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes that data collection extends beyond Waze's own platform to include activity on third-party services accessed through or linked to Waze, the scope of which depends on which third-party integrations a user activates.
Under this clause, when a user links third-party services such as Spotify or other integrated apps to their Waze account, Waze states it may collect data about the user's activity on those third-party platforms. Users can disconnect third-party integrations at any time through the Waze app, and the policy states that data sharing with the disconnected service will cease from …
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Waze.