Square
· Square Privacy Notice
Sharing personal data with third-party advertising partners for targeted advertising purposes may qualify as a sale or sharing of personal information under CCPA/CPRA, triggering opt-out rights for California residents, and requires a valid lawful basis under GDPR.
The clause creates a framework distinguishing between personal and non-personally identifiable information, with different authorization standards for each category. This distinction determines which data flows require explicit user consent versus those the service may execute unilaterally for operational purposes.
The provision creates a dual privacy framework: HIPAA compliance applies when Care Providers are engaged, while state-specific consumer health data laws apply to other health data collected. This establishes different regulatory obligations and data handling standards depending on the user's interaction type.
The provision establishes a data-sharing practice that extends user information to external advertising technology providers for targeting and analytics purposes. This practice triggers disclosure obligations under state privacy statutes and defines the operational scope of third-party data access.
Uber
· Uber Privacy Notice
The clause establishes the conditions and scope under which Uber may share user data with government and law enforcement entities without separate user notice or consent, creating an operational pathway for data disclosure based on Uber's good faith assessment of legal necessity.
Zillow
· Zillow Privacy Notice
Users submitting a single inquiry may receive outreach from multiple professionals they did not individually select, because Zillow treats the inquiry as authorization to share data more broadly.
Redfin
· Redfin Privacy Policy
This means your real estate browsing behavior and account data may follow you across the internet in the form of targeted advertising, even on unrelated platforms.
Sharing personal data with advertising networks for behavioral targeting is the mechanism through which your gameplay activity, device identifiers, and inferred interests may follow you across the internet beyond Activision's own platforms.
Uber
· Uber Privacy Notice
This provision establishes the operational framework for Uber's data monetization through third-party advertising relationships. It authorizes data flows to external advertising and measurement entities that operate independently of Uber's direct control.
This provision establishes the operational scope of third-party data access within Shopify's service model, defining which external entities may receive user information for marketing and advertising purposes.
SoFi
· SoFi Privacy Notice
Sharing personal information with advertising and analytics partners may constitute 'sharing' for cross-context behavioral advertising under CCPA/CPRA, triggering opt-out rights for California residents and specific vendor agreement requirements.
Sharing data with media and entertainment affiliates for advertising substantially expands the universe of entities that may use your personal data beyond the internet and cable service relationship you signed up for.
This clause establishes a data-sharing practice that expands the set of entities with access to user personal information beyond Robinhood's direct operations. The operational significance depends on the scope of personal information shared and the scope of marketing partners' permitted uses.
The clause establishes the operational scope of data sharing practices by explicitly permitting disclosure of user information to non-affiliated entities for marketing purposes, which expands the network of parties with access to personal data beyond the primary service provider.
The clause establishes a data-sharing framework that enables cross-platform advertising operations. It specifies the categories of recipients (marketing companies, social media platforms, analytics providers) and the permitted uses (targeted ad delivery, tracking across services) that support Disney+'s advertising business model.
The clause establishes the operational basis for cross-context behavioral advertising, defining how user activity data is aggregated and applied for ad targeting purposes. It also specifies the mechanisms by which users may exercise control over this data practice.
Tinder
· Tinder Privacy Policy
The clause establishes a data processing mechanism where personal identifiers are transformed into non-personal identifiers for advertising segmentation purposes, enabling both negative targeting (exclusions) and lookalike audience targeting without direct personal identification.
Microsoft
· Microsoft Privacy Statement (Legacy)
The provision operationalizes Microsoft's advertising model by specifying which data categories are excluded from ad targeting and which data sources are permitted for ad personalization. This delineation defines the scope of data processing Microsoft may conduct for advertising purposes across its portfolio and partner networks.
This clause establishes the operational scope and data sources for LinkedIn's ad targeting system, specifying that inferred data derived from user profiles constitutes a valid input for advertising personalization. The authorization extends targeting activities beyond LinkedIn's owned services to partner networks, establishing a multi-channel advertising framework.
The clause defines the informational scope and types that Disney+ may process under the privacy policy, establishing the framework within which data collection and use practices operate.
The provision establishes the operational framework for external account aggregation by specifying which third-party processors handle credential transmission and data access. It allocates data processing responsibilities between Wealthfront and the designated aggregation service providers, each operating under their own documented privacy and service terms.
Egnyte
· Egnyte Privacy Policy
The clause establishes the operational framework for data flows beyond Egnyte's direct control, specifying that user information will be transmitted to external parties for advertising optimization and service analytics purposes. This creates contractual authorization for third-party data collection and processing activities that occur parallel to the user's direct service relationship.
Eufy
· Eufy Privacy Policy
Sharing personal data with advertising partners goes beyond what is necessary to operate a smart home security service, and may constitute a 'sale' or 'sharing' of personal information under CCPA, giving California residents the right to opt out.
The authorization establishes the operational scope of data recipients beyond Instacart's direct service delivery. This disclosure practice affects the extent of third-party access to user information and usage patterns collected through the platform.
Lyft
· Lyft Privacy Policy
This provision establishes the operational framework for data collection and distribution practices. It specifies that user activity data flows to external analytics and advertising entities as part of the service's standard operational model.
The sharing of personal information with advertising and analytics vendors in the context of a mental health platform is particularly sensitive because usage patterns, session frequency, and feature engagement may reveal or infer mental health status or treatment-seeking behavior.
This provision establishes data flows to third-party advertising and analytics partners, which under CCPA/CPRA may constitute a sale or sharing of personal information for cross-context behavioral advertising, triggering opt-out rights. Under GDPR, such sharing may require explicit consent or a documented legitimate interest basis.
Tinder
· Tinder Privacy Policy
The provision establishes the operational framework for data distribution to third parties and creates the basis for interest-based advertising delivery. It delegates certain service functions to external vendors while maintaining authorization for those vendors to receive user information for advertising purposes.
The clause establishes the operational framework under which T-Mobile discloses identifiable subscriber data to external parties as part of its advertising and analytics operations, with an opt-out mechanism available through the Privacy Center or industry tools.
Grindr
· Grindr Privacy Policy
Sharing personal data with advertising technology companies can result in that data being combined with information from other sources to build detailed profiles, which may extend far beyond what users expect from a dating app.