2

In researching another question, I came across conflicting information in the published policies of a company. Their Policy FAQ article indicates the need for a phone number is strictly for verifying your account and not for any other purposes.

When you sign up for our platform, we do require a phone number. However, we only ask for this information to help us verify your account and ensure our platform remains secure.

We don't use your phone number for any other purposes, and we take your privacy very seriously. Thank you for your understanding!

Lower in the search rankings I found their Privacy Policy which, buried in a wall of text, indicates they will "share" your personal information with marketers. [emphasis added]

Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may share Personal Information with vendors and service providers, including providers of hosting services, cloud services, and other information technology services providers, event management services, email communication software and email newsletter services, advertising and marketing services, and web analytics services. Pursuant to our instructions, these parties will access, process, or store Personal Information in the course of performing their duties to us.

Could their more concise and plainly worded article claiming to not use your phone number for any purposes beyond account verification be legally enforceable over their disclaimer in their privacy policy allowing them to share personal information (which would normally include phone number) with "advertising and marketing services"?

2 Answers 2

2

There's no conflict here.

The company collects your phone number for a specific purpose: to help them verify your account and ensure their platform remains secure.

The second paragraph says that they may share your Personal Information with others and lists some examples. It doesn't say they will do that.

However, if they share your phone number with someone in order to help verify your account, or to make sure their platform is not compromised, that's permitted. It's to be expected that the supplier company will follow instructions and use the data only for that purpose.

The primary purpose of verification and security doesn't appear to allow your phone number to be used for advertising and marketing purposes, so it won't be shared with those service providers. Other personal information might be, though, but because the word may is used, it's quite possible that no data will be shared at all.

-1

Could their more concise and plainly worded article claiming to not use your phone number for any purposes beyond account verification be legally enforceable over their disclaimer in their privacy policy allowing them to share personal information (which would normally include phone number) with "advertising and marketing services"?

Yes, provided that the user himself uses his phone number only for verification of sign up.

The policy you point out would be forfeited as soon as the user uses his phone [number] for purposes other than verification of sign up, such as communicating with the provider or interacting with the provider's social media pages. Those uses of the phone would bring the phone number within scope of contact information that, pursuant to the privacy policy, the provider is authorized to collect and share with third parties.

To revert the aforementioned forfeiture, users may exercise their "right to request deletion" of their telephone number. The provider's timely compliance with that request would preclude unauthorized disclosure of user's phone number.

3
  • I do not see where the policy addresses contact information specifically or anywhere an implication that a policy is forfeited by some action if the user. I agree that in the normal course of things if you call for support and ask to be called back for support they can call you back but I do not see how that makes it open season on the number you signed up with. Dec 15, 2022 at 17:01
  • @GeorgeWhite The question is "From what number did the user contact the provider?". If a user signs up with phone number A and later on calls the provider from a different number B, the provider collects B (see par. that starts with "Contact Information") and A remains "protected" from further processing (i.e., collecting and sharing). But oftentimes A and B happen to be the same. It is in those cases that number A falls within scope of that paragraph. The user is precluded from saying "You cannot collect the number from which I'm calling you, since it's the same with which I signed up". Dec 15, 2022 at 20:12
  • 1
    I was just reading the policy as quoted in the question. I see that the linked policy states that affiliates etc. may have access to "communication information". Dec 15, 2022 at 20:32

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .