WhatsApp · WhatsApp Privacy Policy · View original document ↗

Location Information Collection

Medium severity High confidence Explicitdocumentlanguage Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity WhatsApp recorded 3 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for WhatsApp Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

WhatsApp collects your precise GPS location if you grant permission, and even if you do not, it estimates your general location from your IP address and phone number area code every time you use the app.

This analysis describes what WhatsApp's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Location data is collected passively and continuously even without explicit user consent to GPS tracking, meaning approximate location is inferred from network data regardless of your location permission settings.

Recent Activity

This document changed recently

Medium Apr 19, 2026

The updated policy now explicitly discloses that users 'may see other types of ads in Status and Channels,' whereas the prior language stated WhatsApp had 'no intention to introduce' new ad types. Th…

Consumer impact (what this means for users)

Your approximate location is collected by WhatsApp every time you use the app based on your IP address, even if you have denied the app location permissions, and this data is subject to the broader Meta data sharing framework described in the policy.

How other platforms handle this

Uber Medium

Uber collects precise or approximate location data from riders' and order recipients' mobile devices when the Uber app is running in the foreground (app open and on-screen) or background (app open but not on-screen) of their device. Uber collects this data from the time a ride or order is requested ...

PlanetScale Medium

When you visit the Careers portion of our websites, we collect the information that you provide to us in connection with your job application. This includes but is not limited to business and personal contact information, professional credentials and skills, educational and work history and other in...

American Airlines Medium

American does not knowingly collect personal information directly from children – persons under the age of 13, or another age if required by applicable law – other than when required to comply with the law or for safety and security reasons. Due to the nature of our Services, we may collect travel i...

See all platforms with this clause type →

Monitoring

WhatsApp has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
When you use our Services, we collect information about you including your location. If you allow us to, we collect precise location (GPS and the like) information from your device when you use our Services. Even if you don't use precise location features, we use IP addresses and other information like phone number area codes to estimate your general location (e.g. city and country).

— Excerpt from WhatsApp's WhatsApp Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: Precise location data is classified as sensitive personal data in several jurisdictions and its collection requires explicit consent or a strong legitimate interest justification under GDPR. IP-based location inference, while less precise, still constitutes personal data processing requiring a valid legal basis. The FTC has taken enforcement action against companies that collect precise location data without adequate disclosure or consent. Several US states including California, Colorado, and Virginia have enacted comprehensive privacy laws that treat precise geolocation as sensitive data requiring opt-in consent. GOVERNANCE EXPOSURE: Medium. The collection of inferred location from IP address without a separate consent mechanism, combined with the Meta data sharing framework, creates exposure in jurisdictions treating geolocation as sensitive. The policy discloses the practice but does not provide a mechanism to opt out of IP-based location inference specifically. JURISDICTION FLAGS: California's CCPA treats precise geolocation as a sensitive personal information category requiring opt-in consent for processing. EU/EEA users benefit from GDPR protections requiring explicit consent or strong legitimate interest for location processing. Users in states with comprehensive privacy laws enacted since 2022 should evaluate whether those laws extend sensitive data protections to IP-inferred location. CONTRACT AND VENDOR IMPLICATIONS: Organizations whose employees use WhatsApp in jurisdictions with sensitive geolocation protections should consider whether continuous IP-based location collection by WhatsApp creates compliance exposure, particularly where employees work in sensitive environments or locations. COMPLIANCE CONSIDERATIONS: Privacy teams should assess whether the distinction between GPS-based precise location and IP-based inferred location is material under applicable law in key jurisdictions, and whether IP-based location inference requires its own legal basis or disclosure beyond what is currently provided in the policy.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has enforcement authority over location data collection practices by technology companies, including where collection is not fully transparent to consumers
    File a complaint →
  • State AG
    Several state attorneys general have authority under state comprehensive privacy laws treating precise geolocation as sensitive data requiring opt-in consent, including California
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
DMA
European Union
ePrivacy Directive
European Union
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
UK GDPR
United Kingdom
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
WhatsApp Privacy Policy
Entity
WhatsApp
Document last updated
May 5, 2026
Tracking information
First tracked
May 10, 2026
Last verified
May 10, 2026
Record ID
CA-P-009854
Document ID
CA-D-00176
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
b72d7f17a0c8e003eddd20772a30ed9f779f41f1cdc3edb9b0fe700be47c245d
Analysis generated
May 10, 2026 23:25 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: WhatsApp
Document: WhatsApp Privacy Policy
Record ID: CA-P-009854
Captured: 2026-05-10 23:25:45 UTC
SHA-256: b72d7f17a0c8e003…
URL: https://conductatlas.com/platform/whatsapp/whatsapp-privacy-policy/location-information-collection/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does WhatsApp's Location Information Collection clause do?

Location data is collected passively and continuously even without explicit user consent to GPS tracking, meaning approximate location is inferred from network data regardless of your location permission settings.

How does this clause affect you?

Your approximate location is collected by WhatsApp every time you use the app based on your IP address, even if you have denied the app location permissions, and this data is subject to the broader Meta data sharing framework described in the policy.

Is ConductAtlas affiliated with WhatsApp?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by WhatsApp.