The HIPAA designation, where it applies, triggers a specific legal framework governing how health information may be used and disclosed, offering users corresponding protections.
Apple
· Apple App Store Review Guidelines
Apps conducting health-related human subject research must obtain consent from participants or, in the case of minors, their parent or guardian.
To the extent that national or local laws require it, this may also include health status, including your temperature, COVID-19-related symptoms, exposure to COVID-19 positive individuals, vaccination status...
This clause reveals that Verizon-installed software can remain active and non-visible on a deactivated device whenever it connects to Wi-Fi, meaning users may not be aware these apps are running.
LinkedIn
· LinkedIn Advertising Policies
This requirement imposes a specific technical security obligation on advertisers whose linked sites collect sensitive data, making non-HTTPS collection a policy violation.
HubSpot's designation as controller for this data means HubSpot bears legal responsibility for how that professional personal data is collected and processed before it is shared with customers.
Customer data, including meeting content, may be transcribed and recorded by a third-party subprocessor in the United States.
This clause is consequential because it establishes the baseline set of personal and account identifiers Cash App collects from users, including network-level identifiers such as IP address.
Venmo
· Venmo Privacy Policy
Identification Information - your name, street address, email address, date of birth, and Social Security number ("SSN") (or other governmental issued verification numbers).
A wide range of ordinary user actions—including simply interacting with Grubhub—trigger the collection of personal identifiers.
Square
· Square Privacy Notice
Square collects biometric data extracted from facial scans, which is among the most sensitive categories of personal information and is subject to heightened legal protections in many jurisdictions.
Affirm
· Affirm Terms of Service
By using the Affirm Services, you authorize Affirm, directly or through third parties, to make any inquiries we consider necessary to validate your identity and to collect information about you...
Biometric facial data is a particularly sensitive category of personal data, and its generation is performed by a third-party vendor rather than Coursera directly.
StockX
· StockX Privacy Policy
The scope of identity data requested is extensive and sensitive, and it is shared directly with a third-party provider rather than retained solely by StockX.
You will need to complete certain verification procedures before you are permitted to use the Services and your access to one or more Account(s) or the Services...may be altered as a result of information collected on an ongoing basis.
When you use our Services, we may collect information about the images and audio that are form part of your User Content, including identifying the objects and scenery that appear, the existence, the nature of the audio, and the text …
Google
· Google Privacy Policy
although Incognito mode in Chrome can help keep your browsing private from other people who use your device, third party sites and apps that integrate our services still share information with Google ...
Indeed
· Indeed Terms of Service
By using the Site, including via an API, you agree that Indeed collects, records, processes, analyzes, and stores (including via automated means) all your activities, interactions, and communications on or through the Site. This includes visited URLs, viewed content, input …
Affirm
· Affirm Privacy Policy
Third party sources that we rely on to enrich our loan eligibility determinations. This includes credit reporting agencies, identity verification, fraud prevention, and similar services.
Cursor
· Cursor Privacy Policy
Personal data embedded in user Inputs is actively collected by Cursor and may be reproduced in Suggestions, meaning sensitive information could appear in generated outputs.
Writer
· Writer Privacy Policy
Personal information voluntarily embedded in inputs is collected by Writer and may reappear in generated outputs, creating potential exposure of that information.
Udemy
· Udemy Privacy Policy
If you apply to become an instructor, we may collect government ID information, verification photo, date of birth, race/ethnicity, and phone number.
Online activity data can reveal detailed behavioral patterns; Experian's sale or disclosure of this category transfers those behavioral records to outside parties.
Collection is automatic and does not require any affirmative submission by the user—simply using the platform triggers collection of detailed behavioral and browsing data.
Uber
· Uber Privacy Notice
Video recordings of users inside a vehicle are collected as a mandatory consequence of taking an autonomous vehicle ride, with no opt-out indicated.
Waze
· Waze Privacy Policy
Users may reasonably believe Invisible mode provides privacy from Waze as well as from other users; the clause clarifies that Waze's own data collection is unaffected by that mode.
we may temporarily process your IP address only where required for some of our Offerings (depending on your MetaMask settings) to provide the best possible experience for MetaMask users.
Eufy
· Eufy Privacy Policy
when you participate in testing tasks published on the JML platform, we may collect video, audio, or image data that you voluntarily provide, such as audio wake-up words. This information is used for model training...
Apple
· Apple App Store Review Guidelines
Collect user activity only to enhance the functionality of the user's keyboard extension on the iOS device.
TikTok
· TikTok Privacy Policy
Technical information from your device, network, and application, including your IP address, user agent, mobile carrier, time zone settings, identifiers for advertising purposes...keystroke patterns or rhythms