WhatsApp · WhatsApp Privacy Policy · View original document ↗

Location and Device Data Collection

Medium severity High confidence Explicitdocumentlanguage Rare · 1 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity WhatsApp recorded 3 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for WhatsApp Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

WhatsApp automatically collects extensive technical information from your device including your IP address, mobile network, battery level, unique device identifiers, and identifiers linked to other Facebook/Meta products on the same device.

This analysis describes what WhatsApp's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

The collection of unique identifiers associated with other Facebook Company products on the same device creates a technical linkage between your WhatsApp usage and your activity on other Meta platforms, supporting cross-platform data integration described elsewhere in the policy.

Recent Activity

This document changed recently

Medium Apr 19, 2026

The updated policy now explicitly discloses that users 'may see other types of ads in Status and Channels,' whereas the prior language stated WhatsApp had 'no intention to introduce' new ad types. Th…

Consumer impact (what this means for users)

WhatsApp collects device identifiers including those shared with Facebook and Instagram on the same device, your IP address, mobile network details, and battery and signal information; this data is collected automatically when you use the app and forms part of the information shared with Meta Companies.

How other platforms handle this

Uber Medium

Uber collects precise or approximate location data from riders' and order recipients' mobile devices when the Uber app is running in the foreground (app open and on-screen) or background (app open but not on-screen) of their device. Uber collects this data from the time a ride or order is requested ...

Robinhood Medium

Geolocation data, such as device location. Internet or other electronic network activity information, such as browsing history, search history, and information regarding a consumer's interaction with an internet website, application, or advertisement. Device identifiers, such as IP address, unique d...

PlanetScale Medium

When you visit the Careers portion of our websites, we collect the information that you provide to us in connection with your job application. This includes but is not limited to business and personal contact information, professional credentials and skills, educational and work history and other in...

See all platforms with this clause type →

Monitoring

WhatsApp has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We collect device and connection-specific information when you install, access, or use our Services. This includes information such as hardware model, operating system information, battery level, signal strength, app version, browser information, mobile network, connection information (including phone number, mobile operator or ISP), language and time zone, IP address, device operations information, and identifiers (including identifiers unique to Facebook Company Products associated with the same device or account).

— Excerpt from WhatsApp's WhatsApp Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: Automatic collection of device identifiers, IP addresses, and cross-platform linkage identifiers engages GDPR Article 4(1) (personal data definition, as IP addresses and persistent identifiers constitute personal data), Article 5 (data minimization), and ePrivacy Directive requirements for the use of tracking technologies in EU/EEA member states. The UK GDPR and UK PECR impose equivalent requirements. The FTC Act Section 5 is relevant for US users regarding unfair or deceptive data collection practices. GOVERNANCE EXPOSURE: Medium. The collection of identifiers linked to Facebook Company Products on the same device is operationally significant because it creates a technical bridge between WhatsApp usage data and broader Meta user profiles without requiring explicit user action. This linkage supports the Meta-group data sharing described in the policy. JURISDICTION FLAGS: EU and UK users are protected by both GDPR personal data rules and ePrivacy/PECR requirements for device-level data collection. California residents may have CCPA rights regarding device identifier collection and sharing. Illinois BIPA is not directly implicated by these identifiers unless they constitute biometric data. CONTRACT AND VENDOR IMPLICATIONS: Enterprise deployments should note that device-level identifiers tied to Meta products may create unintended linkages between employee WhatsApp accounts and their personal Meta profiles if they share a device. This has implications for bring-your-own-device policies and enterprise privacy programs. COMPLIANCE CONSIDERATIONS: Privacy teams should include device identifier collection in data mapping exercises and assess whether the collection of cross-platform identifiers is necessary for core messaging service delivery, as GDPR data minimization principles may apply. Cookie and tracking technology audits should encompass device-level identifiers collected by WhatsApp.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has jurisdiction over data collection practices that may constitute unfair or deceptive acts, including automatic collection of cross-platform identifiers without adequate disclosure.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
DMA
European Union
ePrivacy Directive
European Union
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
UK GDPR
United Kingdom
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
WhatsApp Privacy Policy
Entity
WhatsApp
Document last updated
May 5, 2026
Tracking information
First tracked
May 12, 2026
Last verified
May 12, 2026
Record ID
CA-P-011431
Document ID
CA-D-00176
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
da3747c89494f5bc1ac42196c98a312f3a8f2653a848eb7d232db53b79597ebe
Analysis generated
May 12, 2026 10:01 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: WhatsApp
Document: WhatsApp Privacy Policy
Record ID: CA-P-011431
Captured: 2026-05-12 10:01:37 UTC
SHA-256: da3747c89494f5bc…
URL: https://conductatlas.com/platform/whatsapp/whatsapp-privacy-policy/location-and-device-data-collection/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does WhatsApp's Location and Device Data Collection clause do?

The collection of unique identifiers associated with other Facebook Company products on the same device creates a technical linkage between your WhatsApp usage and your activity on other Meta platforms, supporting cross-platform data integration described elsewhere in the policy.

How does this clause affect you?

WhatsApp collects device identifiers including those shared with Facebook and Instagram on the same device, your IP address, mobile network details, and battery and signal information; this data is collected automatically when you use the app and forms part of the information shared with Meta Companies.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 1 platforms. See the full comparison.

Is ConductAtlas affiliated with WhatsApp?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by WhatsApp.