Connected Account Data Access

What it is

If you link your ZipRecruiter account to a social media or professional network account such as LinkedIn or Google, ZipRecruiter can access a broad range of information from those accounts including your contacts, timeline, and network data.

Why it matters (compliance & governance perspective)

Connecting a social account to ZipRecruiter grants the platform access to information well beyond your basic profile, including your social connections and activity feeds, which may exceed what you intend to share for job searching purposes.

Consumer impact (what this means for users)

Linking your LinkedIn, Google, or social media account to ZipRecruiter enables ZipRecruiter to access your contacts, timeline feeds, and network statistics from those platforms, not just your name and email, which may result in broader data collection than expected.

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: Collection of contact list and social graph data from connected accounts engages GDPR Articles 5 and 6 regarding data minimization and purpose limitation for EEA users, and CCPA disclosure requirements for California residents. The collection of third-party contact data (contact and follow lists) creates obligations toward individuals in those lists who have not consented to ZipRecruiter processing their data. GOVERNANCE EXPOSURE: Medium. The scope of data accessible from connected accounts, particularly contact and follow lists, extends processing to individuals who are not ZipRecruiter users and have not consented to this use. The policy discloses the practice but does not describe what ZipRecruiter does with contact list data or how long it is retained. JURISDICTION FLAGS: EEA and UK users face data minimization and purpose limitation scrutiny under GDPR. California users should be aware that contact list data from connected accounts is governed by CCPA, and the CPRA's sensitive personal information framework may apply depending on the nature of the contacts accessed. Illinois BIPA is not directly engaged unless biometric data is collected via connected accounts. CONTRACT AND VENDOR IMPLICATIONS: Organizations that allow employees to use ZipRecruiter with corporate social or professional accounts should consider whether connected account data access creates a data breach risk or unauthorized disclosure under corporate data governance policies. COMPLIANCE CONSIDERATIONS: Legal teams should assess whether the breadth of connected account data collection is consistent with GDPR data minimization principles and whether separate consent is needed for processing contact list data belonging to third parties. Users should be informed at the point of account connection exactly what data categories will be accessed.

Applicable agencies

Provision details

Other risks in this policy

• AI and Machine Learning Use for Job Matching medium
• Non-User Data Collection from Third Parties medium
• EU-U.S. Data Privacy Framework Certification medium
• Sensitive Personal Data Advisory and Resume Submissions medium
• Data Subject Access Rights (Non-EEA Users) low
• Third-Party Sharing and Disclosure medium