When you give WhatsApp permission to access your contacts, it uploads and stores the phone numbers of everyone in your address book — including people who have never agreed to WhatsApp's terms.
Every person in your phone's contacts list — whether or not they use WhatsApp — may have their phone number uploaded to WhatsApp and Meta's servers without their knowledge or consent, raising significant privacy concerns for non-users.
Cross-platform context
See how other platforms handle Contact List Upload Including Non-Users and similar clauses.
Compare across platforms →People who have never signed up for WhatsApp and never agreed to its privacy policy may have their phone numbers collected and stored by Meta simply because someone they know uses WhatsApp.
1. REGULATORY FRAMEWORK: This provision implicates GDPR Art. 6(1) regarding lawfulness of processing personal data of non-users (third parties who have not consented), Art. 14 (information to be provided where personal data have not been obtained from the data subject), and Art. 5(1)(c) data minimisation principle, enforced by the Irish DPC. It also engages FTC Act Section 5 for collection of data about individuals who have not consented, and potentially CCPA/CPRA for California residents whose data is collected without direct consent. 2.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.