Chase Mobile

"We may share the information we collect from and about you with our affiliates and other third parties as described below. In particular, we may share your information with: Chase third-party service providers; Chase affiliated websites and businesses in an effort to bring you improved service across our family of products and services, when permissible under relevant laws and regulations; Other companies to bring you co-branded services, products or programs that you have requested; Third parties or affiliates in connection with a corporate transaction, such as a sale, consolidation or merger of Chase businesses."

Chase shares user data broadly across affiliates, service providers, co-branded partners, and in corporate transactions, with vague justifications like 'improved service across our family of products and services.'

"Certain companies we work with may set cookies and use related tracking technologies, such as the clear GIFs discussed above, throughout our online services or in our communications to support these OBA efforts. Which advertisements you see is often determined using the information we or our affiliates, service providers and other companies that we work with have about you, including information about your relationships with us (e.g., types of accounts held, transactional information, location of banking activity)."

Chase and its partners deploy cookies, web beacons, and other tracking technologies to follow users across websites and build advertising profiles based on browsing history, account relationships, and transaction data.

"When you interact with us through Chase Mobile, we may collect information such as unique device identifiers for your mobile device, your screen resolution and other device settings, information about your location, and analytical information about how you use your mobile device. We may ask your permission before collecting certain information (such as precise geo-location information) through Chase Mobile."

Chase collects location information from mobile devices, including precise geo-location data. While they say they 'may ask permission' for precise location, the phrasing is non-committal and general location data appears to be collected without explicit consent.

"When you interact with us through Chase Mobile, we may collect information such as unique device identifiers for your mobile device, your screen resolution and other device settings, information about your location, and analytical information about how you use your mobile device. We may also collect certain information about your use of our online services. For example, we may capture the IP address of the device you use to connect to the online service, the type of operating system and browser you use."

Chase collects unique device identifiers, screen resolution, device settings, operating system details, and analytical data about how you use your device — much of which goes beyond what's needed for banking services.

"We may change this Online Privacy Policy from time to time. When we do, we will let you know by appropriate means such as by posting the revised policy on this page with a new "Last Updated" date. Any changes to this Online Privacy Policy will become effective when posted unless indicated otherwise."

Chase can change its privacy policy at any time with changes taking effect immediately upon posting. There is no requirement for user consent or even direct notification — simply updating the webpage is sufficient.

"We may also later associate the usage and other information we collect online with personal information about you. We may also collect information about you from additional online and offline sources including from co-branded partner sites or commercially available third-party sources, such as credit reporting agencies. We may combine this information with the personal and other information we have collected about you under this Online Privacy Policy."

The policy makes no mention of how long data is retained, when it is deleted, or what happens to collected data after account closure. Chase aggregates data from multiple sources with no stated limits on retention.