WhatsApp · WhatsApp Privacy Policy · View original document ↗

Device and Connection Identifier Collection

Medium severity High confidence Explicitdocumentlanguage Unique · 0 of 352 platforms
Get alerted the next time WhatsApp changes these terms. Get same-day alerts →
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity WhatsApp recorded 16 documented changes in the last 30 days.
Get same-day alerts →
Monitor governance changes for WhatsApp Monitor emails you the same day this changes. The archive stays free.
Get same-day alerts →

Get the weekly research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.

Document Record

What it is

The policy states that WhatsApp automatically collects hardware model, OS information, battery level, signal strength, IP address, mobile operator, browser information, language, time zone, and device identifiers that are linked to Meta Company Products on the same device or account. This collection occurs upon installation, access, or use of the Services.

This analysis describes what WhatsApp's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision establishes collection of device identifiers that are explicitly described as unique to Meta Company Products, creating a technical linkage between WhatsApp usage data and a user's broader Meta account ecosystem. This identifier linkage underpins the cross-Meta data sharing described elsewhere in the policy.

Recent Activity

This document changed recently

Medium Jun 22, 2026

The updated policy removes an unconditional statement of intent and replaces it with conditional language: 'We have no intention to introduce them, but if we ever do, we will update this Privacy Policy.' This revision reserves WhatsApp's right to introduce ad formats in Status and Channels in the future, subject only to updating the privacy policy at that time. The prior language established a stronger commitment; the updated language is more permissive. No specific consumer action is required; the change is informational regarding WhatsApp's future flexibility on advertising formats.

View change record →
Medium Jun 5, 2026

The updated terms no longer state that WhatsApp has no intention to introduce ads in Status and Channels. Instead, the revised language indicates that if ads are introduced in these features, WhatsApp will update its privacy policy to reflect the change. This means the company has reserved the option to add ads to Status and Channels in the future, subject to policy update notification.

View change record →
Medium Apr 19, 2026

The updated policy now explicitly discloses that users 'may see other types of ads in Status and Channels,' whereas the prior language stated WhatsApp had 'no intention to introduce' new ad types. This represents a shift from a stated commitment not to expand advertising toward an explicit acknowledgment that new ad categories may appear on WhatsApp's social features. The policy also updated its regional privacy guidance by removing a reference to Thai Personal Data Protection Act rights and adding a new section directing US residents to WhatsApp's United States Regional Privacy Notice for information about their consumer privacy rights under US law.

View change record →

Clause Stability Stable

0
Changes
4
Months Monitored
Jul 9, 2026
First Seen
Jul 9, 2026
Last Seen

Consumer impact (what this means for users)

The agreement authorizes collection of device identifiers linked to Meta Company Products upon installation or use of WhatsApp, which the policy states are used to support cross-Meta data sharing for advertising personalization and product improvements. Users who install WhatsApp on a device also associated with other Meta products may have usage data linked across those products.

Cross-platform context

See how other platforms handle Device and Connection Identifier Collection and similar clauses.

Compare across platforms →

Monitoring

WhatsApp has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Get Monitor Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We collect device and connection-specific information when you install, access, or use our Services. This includes information such as hardware model, operating system information, battery level, signal strength, app version, browser information, mobile network, connection information (including phone number, mobile operator or ISP), language and time zone, IP address, device operations information, and identifiers (including identifiers unique to Meta Company Products associated with the same device or account).

Excerpt from WhatsApp's Privacy Policy

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

(1) REGULATORY LANDSCAPE: Collection of device identifiers linked across Meta Company Products implicates GDPR recital 30 and Article 4's definition of personal data (identifiers that can be used to single out individuals), as well as ePrivacy Directive provisions on access to device information. The Illinois Biometric Information Privacy Act is not directly implicated, but state-level device identifier regulations (e.g., California CCPA definitions of personal information) apply. The FTC and Irish DPC are the primary enforcement authorities. (2) GOVERNANCE EXPOSURE: Medium. The collection of cross-Meta device identifiers is disclosed but the full scope of downstream use is dependent on the cross-Meta data sharing provisions. The linkage of WhatsApp identifiers to other Meta product accounts may create data minimization challenges under GDPR Article 5. (3) JURISDICTION FLAGS: EU/EEA users have the strongest regulatory basis to challenge cross-product identifier linkage under GDPR data minimization and purpose limitation principles. California residents may request disclosure of the categories of personal information collected, including device identifiers, under CCPA. (4) CONTRACT AND VENDOR IMPLICATIONS: Enterprises deploying WhatsApp for business communications should assess whether employee device identifier data collected by WhatsApp and linked to Meta Company Products creates any obligations under applicable employment or data protection law, particularly in the EU. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should include WhatsApp device identifier collection in data mapping inventories and evaluate whether the cross-Meta identifier linkage is covered by existing consent mechanisms or legitimate interests assessments. For EU operations, assess whether the collection of battery level, signal strength, and other non-essential device data satisfies the data minimization principle under GDPR Article 5(1)(c).

Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Start Insight · $19.99/mo Start with Monitor · $4.99/mo

Applicable agencies

  • FTC
    The FTC has jurisdiction over consumer data collection practices and cross-platform identifier linkage under Section 5 of the FTC Act.
    File a complaint →

Provision details

Document information
Document
WhatsApp Privacy Policy
Entity
WhatsApp
Document last updated
May 5, 2026
Tracking information
First tracked
July 9, 2026
Last verified
July 9, 2026
Record ID
CA-P-014842
Document ID
CA-D-00176
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
454d96d4e64ccebb1f334c0556638651c7de109fc425fa2573cd35b326d7bea0
Analysis generated
July 9, 2026 06:34 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: WhatsApp
Document: WhatsApp Privacy Policy
Record ID: CA-P-014842
Captured: 2026-07-09 06:34:41 UTC
SHA-256: 454d96d4e64ccebb…
URL: https://conductatlas.com/platform/whatsapp/whatsapp-privacy-policy/provision/CA-P-014842/device-and-connection-identifier-collection/
Accessed: July 24, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Governance intelligence across arbitration, AI governance, data rights, indemnification, and retention
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
Start Insight · $19.99/mo Start with Monitor · $4.99/mo

Frequently Asked Questions

What does WhatsApp's Device and Connection Identifier Collection clause do?

This provision establishes collection of device identifiers that are explicitly described as unique to Meta Company Products, creating a technical linkage between WhatsApp usage data and a user's broader Meta account ecosystem. This identifier linkage underpins the cross-Meta data sharing described elsewhere in the policy.

How does this clause affect you?

The agreement authorizes collection of device identifiers linked to Meta Company Products upon installation or use of WhatsApp, which the policy states are used to support cross-Meta data sharing for advertising personalization and product improvements. Users who install WhatsApp on a device also associated with other Meta products may have usage data linked across those products.

Is ConductAtlas affiliated with WhatsApp?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by WhatsApp.