Ratings / Site
Critical Rating 1 / 5 · Critical — Active surveillance / serious risk.
X Corp. (formerly Twitter) has a history of privacy failures and a privacy policy that permits extensive data collection and sharing. In May 2022, Twitter agreed to a $150 million penalty with the FTC for misrepresenting that phone numbers and email addresses, collected for secur
X Corp. (formerly Twitter) has a history of privacy failures and a privacy policy that permits extensive data collection and sharing. In May 2022, Twitter agreed to a $150 million penalty with the FTC for misrepresenting that phone numbers and email addresses, collected for security, would not be used for advertising, a clear breach of trust. The current privacy policy (S0, effective January 15, 2026) explicitly states, "Based on your consent, we may collect and use your biometric information for safety, security, and identification purposes," and "We may collect and use your personal information (such as your biographical information, employment history, educational history...)" for job recommendations and sharing with employers. Furthermore, the policy allows sharing with "Third-party collaborators" who "may use it for their own independent purposes... including, for example, to train their artificial intelligence models." This broad data collection, coupled with past regulatory actions like the December 2020 GDPR fine for a data breach, demonstrates a significant threat to user privacy.
The full methodological and legal context for this rating. This card is what we point to when asked to substantiate the claim.