Boost Mobile

"We and our advertising partners may also use information obtained about you through your use of our Services or from third-parties, or gathered through cookies and similar technologies, to deliver more relevant online advertising to you across other computers, devices, websites, and online services that you may use ("interest-based advertising")."

Boost tracks users across multiple devices, websites, and online services to build advertising profiles and deliver targeted ads, combining first-party data with third-party sources.

"We disclose your personal information to EchoStar and EchoStar affiliates, such as AirTV, DISH, Hughes, HughesNet, and Sling TV. ... We may disclose your name and postal address to other parties, such as charities, marketing organizations, corporate affiliates, or other businesses for "mailing list" purposes."

Boost shares personal data across a wide corporate family (EchoStar/DISH affiliates) and also discloses customer names and addresses to third-party marketing organizations and businesses for mailing list purposes.

"Sensitive personal information, including account log-in information in combination with passwords, precise geolocation, and biometric information. ... Imprecise geolocation data, such as general location of devices or IP address. [Sold or Shared:] Yes."

Boost collects both precise and imprecise geolocation data. Imprecise geolocation is sold and shared with third parties including advertisers and data brokers, while precise geolocation is collected as sensitive personal information.

"We may also use session replay software, which collects information about your interaction with the Services, including keystrokes, mouse movements, and form field entries, and may monitor your interactions with the Services. ... our service provider may scan a copy of your government ID in tandem with facial recognition technologies as well as other "behavioral biometrics" technologies (e.g., keystroke dynamics, phone movements (e.g. gyroscope and accelerometer), screen swipe and touch/pressure analysis)."

Boost deploys session replay software that captures keystrokes and mouse movements, and uses behavioral biometrics including gyroscope/accelerometer data, screen pressure analysis, and keystroke dynamics — surveillance that goes well beyond what's needed for basic service.

"We retain personal information about you for the amount of time necessary to provide our Services and for as long as required to satisfy legal or tax requirements, for fraud prevention, or for other business purposes."

Boost provides no specific deletion timelines and uses broad justifications like 'other business purposes' to retain data indefinitely, giving users no clarity on when their data will actually be deleted.

"We may modify this Notice at any time. We will notify you of any material changes (or changes required by applicable law) through written, electronic, or other means as permitted by law."

Boost reserves the right to change its privacy notice at any time, with notification only for 'material' changes and through vaguely defined means — giving the company wide latitude to alter data practices unilaterally.