If you apply for a mortgage through Zillow Home Loans, Zillow collects detailed financial information including your income, assets, and credit history, and shares it with lenders and other parties involved in processing your loan.
This analysis describes what Zillow's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Financial data submitted for mortgage applications is among the most sensitive personal information category; its use and sharing beyond the immediate loan process warrants careful review.
Interpretive note: Whether Zillow Home Loans issues a separate GLBA privacy notice is not confirmed within this document; compliance depends on whether Zillow Home Loans meets the GLBA definition of a financial institution subject to the Privacy Rule.
Removal of specific high-severity provision about financial data handling could indicate restructuring into a separate financial services privacy notice or deprioritization of loan service disclosures.
View full change record →Submitting a mortgage application through Zillow Home Loans means your income, assets, and credit history are shared with lenders and servicers, and the terms governing those disclosures may be subject to GLBA privacy notices separate from this general policy.
How other platforms handle this
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
If we collect health information from these integrations (such as heart rate), we will not sell or use it for advertising or other similar purposes; we do not disclose it to third parties without your prior consent; and we will only use it for the specific purposes described in this Policy.
We collect your personal data when you use our Services, create a new eBay account, provide us with information via a web form, add or update information in your eBay account, participate in online community discussions or otherwise interact with us.
Monitoring
Zillow has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"If you use Zillow Home Loans or other financial services offered through our platforms, we collect financial information including income, assets, credit history, and other information necessary to process your application. This information may be shared with lenders, servicers, and other parties involved in the loan process.— Excerpt from Zillow's Zillow Privacy Notice
1) REGULATORY LANDSCAPE: Collection and sharing of financial data in connection with mortgage applications engages the Gramm-Leach-Bliley Act (GLBA), enforced by the CFPB and FTC. GLBA requires financial institutions to provide separate privacy notices and offer opt-out rights for certain data sharing. The Fair Credit Reporting Act (FCRA) governs the use of credit information and is enforced by the CFPB and FTC. RESPA may also apply to disclosures in the mortgage referral context. 2) GOVERNANCE EXPOSURE: High. Financial and credit data are among the most regulated personal data categories. If Zillow Home Loans qualifies as a financial institution under GLBA, it is required to issue separate Gramm-Leach-Bliley privacy notices and honor opt-out rights for sharing with non-affiliated third parties. Relying solely on a general website privacy policy may be insufficient to satisfy GLBA's disclosure requirements. 3) JURISDICTION FLAGS: Federal GLBA and FCRA apply nationwide. California's Financial Information Privacy Act (FIPA) imposes stricter opt-in requirements for sharing financial data with unaffiliated third parties, creating heightened exposure for California users. New York's Department of Financial Services (NYDFS) regulations may also apply if Zillow Home Loans operates in New York. 4) CONTRACT AND VENDOR IMPLICATIONS: Data sharing agreements with downstream lenders and servicers should be reviewed to confirm that use of applicant financial data is restricted to loan processing purposes and that appropriate data security standards (including those under the FTC Safeguards Rule) are required of all recipients. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should confirm whether Zillow Home Loans issues a standalone GLBA privacy notice, assess whether the opt-out mechanisms required by GLBA for non-affiliated sharing are implemented, and review whether FCRA adverse action and permissible purpose requirements are addressed in the data handling framework.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Financial data submitted for mortgage applications is among the most sensitive personal information category; its use and sharing beyond the immediate loan process warrants careful review.
Submitting a mortgage application through Zillow Home Loans means your income, assets, and credit history are shared with lenders and servicers, and the terms governing those disclosures may be subject to GLBA privacy notices separate from this general policy.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Zillow.