Ratings / App
Critical Rating 1 / 5 · Critical — Active surveillance / serious risk.
Shein is a significant privacy threat due to a history of data mismanagement and regulatory non-compliance. In June 2018, its then-parent company, Zoetop, suffered a data breach affecting 39 million accounts, leading to a $1.9 million settlement in October 2022 for failing to ade
Shein is a significant privacy threat due to a history of data mismanagement and regulatory non-compliance. In June 2018, its then-parent company, Zoetop, suffered a data breach affecting 39 million accounts, leading to a $1.9 million settlement in October 2022 for failing to adequately secure customer data, despite its policy stating, "We maintain physical, electronic, and procedural safeguards designed to guard and prevent misuse of your personal information." Furthermore, the company's broad data sharing practices, outlined in its policy as "We may disclose and share your personal information with the parties as described below," have drawn scrutiny, including a February 2026 Texas AG lawsuit alleging potential accessibility of consumer data to the Chinese government. Shein also faced a €150 million fine from France's CNIL in September 2025 for violating cookie laws by placing advertising cookies without user consent, contradicting the policy's "Your Choices" section which implies user control. These repeated failures and ongoing investigations highlight a systemic disregard for user privacy and data protection.
The full methodological and legal context for this rating. This card is what we point to when asked to substantiate the claim.