WhatsApp · WhatsApp Privacy Policy · View original document ↗

Contact Upload and Processing

High severity Unique · 0 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity WhatsApp recorded 41 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for WhatsApp Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

When you use WhatsApp, it can access and upload your phone's contact list to its servers, even if those contacts have never used WhatsApp.

This analysis describes what WhatsApp's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

The clause establishes the operational mechanism and scope for contact list collection and processing. It distinguishes between handling of user contacts (who have agreed to the service) and non-user contacts (which receive specified data protection treatment during retention).

Recent Activity

This document changed recently

Medium Jun 22, 2026

The updated policy removes an unconditional statement of intent and replaces it with conditional language: 'We have no intention to introduce them, but if we ever do, we will update this Privacy Policy.' This revision reserves WhatsApp's right to introduce ad formats in Status and Channels in the future, subject only to updating the privacy policy at that time. The prior language established a stronger commitment; the updated language is more permissive. No specific consumer action is required; the change is informational regarding WhatsApp's future flexibility on advertising formats.

View change record →
Medium Jun 5, 2026

The updated terms no longer state that WhatsApp has no intention to introduce ads in Status and Channels. Instead, the revised language indicates that if ads are introduced in these features, WhatsApp will update its privacy policy to reflect the change. This means the company has reserved the option to add ads to Status and Channels in the future, subject to policy update notification.

View change record →
Medium Apr 19, 2026

The updated policy now explicitly discloses that users 'may see other types of ads in Status and Channels,' whereas the prior language stated WhatsApp had 'no intention to introduce' new ad types. This represents a shift from a stated commitment not to expand advertising toward an explicit acknowledgment that new ad categories may appear on WhatsApp's social features. The policy also updated its regional privacy guidance by removing a reference to Thai Personal Data Protection Act rights and adding a new section directing US residents to WhatsApp's United States Regional Privacy Notice for information about their consumer privacy rights under US law.

View change record →

Clause Stability Stable

0
Changes
3
Months Monitored
Apr 3, 2026
First Seen
Apr 17, 2026
Last Seen
This clause type exists across 967 other provisions on other platforms.

Consumer impact (what this means for users)

Uploading your contacts means personal information about people who never consented to WhatsApp's policies is collected and processed. This is particularly concerning for users who have sensitive contact lists, such as journalists, lawyers, or healthcare professionals.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Go to WhatsApp Settings, tap Privacy, then Contacts, and disable contact syncing. You can also delete synced contacts from WhatsApp's servers by going to Settings > Account > Delete My Account or contacting support.

How other platforms handle this

Target Medium

Target reserves the right to change these Terms at any time. We will post notification of changes to these Terms on this page. Your continued use of the Target Services after any changes to these Terms constitutes your acceptance of the new Terms.

GitHub Medium

We reserve the right, at our sole discretion, to amend these Terms of Service at any time and will update these Terms of Service in the event of any such amendments. We will notify our Users of material changes to this Agreement, such as price changes, at least 30 days prior to the change taking eff...

Yelp Medium

We may modify the Terms from time to time. The most current version of the Terms will be located here. You understand and agree that your access to or use of the Service is governed by the Terms effective at the time of your access to or use of the Service. If we make material changes to these Terms...

See all platforms with this clause type →

Monitoring

WhatsApp has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
You can use the contact upload feature and provide us, if permitted by applicable laws, with the phone numbers in your address book on a regular basis, including those of users of our Services and your other contacts. If any of your contacts aren't yet using our Services, we'll manage this information for you in a way that ensures those contacts cannot be identified by us.

— Excerpt from WhatsApp's WhatsApp Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

Contact data processing of non-users raises serious GDPR Article 6 lawful basis and Article 14 transparency obligation issues. This practice has been the subject of regulatory scrutiny in multiple EU jurisdictions and poses ongoing compliance exposure.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC may have jurisdiction where contact upload practices constitute unfair data collection affecting non-consenting third parties.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
DMA
European Union
ePrivacy Directive
European Union
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
UK GDPR
United Kingdom
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
WhatsApp Privacy Policy
Entity
WhatsApp
Document last updated
May 5, 2026
Tracking information
First tracked
March 20, 2026
Last verified
March 20, 2026
Record ID
CA-P-000952
Document ID
CA-D-00176
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
d3f0e72bb9c9a2a7b642835fc4be9bf0ea129f05e04a53934bc59c47f456b8f9
Analysis generated
March 20, 2026 05:18 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: WhatsApp
Document: WhatsApp Privacy Policy
Record ID: CA-P-000952
Captured: 2026-03-20 05:18:13 UTC
SHA-256: d3f0e72bb9c9a2a7…
URL: https://conductatlas.com/platform/whatsapp/whatsapp-privacy-policy/contact-upload-and-processing/
Accessed: July 4, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Related Analysis

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does WhatsApp's Contact Upload and Processing clause do?

The clause establishes the operational mechanism and scope for contact list collection and processing. It distinguishes between handling of user contacts (who have agreed to the service) and non-user contacts (which receive specified data protection treatment during retention).

How does this clause affect you?

Uploading your contacts means personal information about people who never consented to WhatsApp's policies is collected and processed. This is particularly concerning for users who have sensitive contact lists, such as journalists, lawyers, or healthcare professionals.

Is ConductAtlas affiliated with WhatsApp?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by WhatsApp.