Data Collection and Sharing Explained

Data collection and sharing refers to how a company gathers your personal information (name, email, location, browsing habits) and what it does with that data, including whether it shares or sells it to other companies. Most agreements grant broad rights here, often in language that's easy to overlook.

What companies collect

Common data types include contact details, device identifiers, IP addresses, location, and behavioral data like which pages you visit or what you tap. Some agreements reserve the right to combine data from multiple sources to build a detailed profile of you.

How data gets shared

Companies often share data with service providers, advertising partners, affiliates, or "trusted third parties." Some also reserve the right to share or transfer data in a business transaction like a merger or sale. The broader the language, the less control you have over where your data ends up.

Example

A terms document states the company may "share personal information with our advertising partners to deliver relevant content" and "retain data as long as commercially necessary." Termcon flags the broad sharing and open-ended retention as a medium-to-high risk data practice.

Why this matters

Once your data is shared, it's hard to get back. Broad collection and sharing can lead to targeted advertising, profiling, or exposure if a partner suffers a breach. Understanding the scope helps you decide what you're willing to trade for a free service.

What Termcon checks

Termcon evaluates how far data collection and sharing rights reach, from narrow and limited to broad and sweeping, and explains the practical impact in plain language.