TikTok's Controversial Privacy Overhaul Sparks Widespread User Concern
Last week, American TikTok users encountered an unexpected pop-up message upon opening the popular social media application. The notification demanded agreement to revised terms of service and an updated privacy policy to continue accessing the platform. This development coincides with TikTok's ongoing transition to new ownership, where ByteDance—the app's Chinese parent company—has negotiated a deal to establish a distinct U.S. version of the viral video-sharing service. Consequently, the platform has implemented significant modifications to its legal agreements and data handling practices specifically for American users.
Growing User Dissatisfaction and Account Deletions
While consumers routinely accept terms and conditions to utilize social media platforms, shopping applications, and various digital services—often trading privacy for access—this particular update has generated substantial discontent. Many users expressed alarm upon reviewing the new requirements for continued TikTok usage.
"I deleted TikTok due to the new terms," one X user posted in a message that garnered over 11,000 likes. "It's scary when you read into it. They can have your geolocation...save data about your health, sexuality, political beliefs."
Calli Schroeder, senior counsel for the Electronic Privacy Information Center, told HuffPost that "The alarm is a fair reaction. People are unaware of how much information these companies get from them, either directly or from inferences. And...people are really unaware of how these companies are able to use and share this information."
Expanded Location Tracking Capabilities
Under TikTok's revised policies for U.S. users, the platform has substantially expanded its location monitoring capabilities. One of the most significant alterations involves enhanced location tracking services, permitting TikTok to gather approximate or precise geographical information unless users explicitly opt out.
George Kamide, co-host of the cybersecurity podcast "Bare Knuckles and Brass Tacks," explained to HuffPost that "It is ultimately just trying to bring the level of surveillance detail to TikTok that has been available to a lot of other social media services."
Users retain the ability to disable precise location services depending on their region. To adjust these settings:
- Open TikTok and tap the Menu icon
- Select Settings and privacy
- Choose Privacy, then tap Location Services
- Determine how much location access you will permit
Alternatively, smartphone operating systems provide methods to restrict location tracking across all applications. On iPhones, for instance:
- Navigate to Settings
- Select Privacy & Security, then Location Services
- Choose TikTok and toggle Precise Location on or off
Schroeder cautioned that "Any location tracking has risks to it. SIM card and IP address tracking...will reveal a state, maybe a city that you're in. Precise geolocation data at times can reveal the specific address you're at."
This capability raises particular concerns, she elaborated, because visiting specific locations like places of worship could enable the application to infer religious affiliations. "Most apps and services that you engage with are collecting much more information about you than you think," Schroeder emphasized.
Collection of Sensitive Personal Information
Another concerning aspect of TikTok's updated terms involves the platform's declaration regarding what it can learn about users' lives. The privacy policy states that TikTok will gather sensitive user-generated information from posts and comments, potentially including:
- Racial or ethnic origin and national origin
- Religious beliefs
- Mental or physical health diagnoses
- Sexual life or sexual orientation
- Status as transgender or nonbinary
- Citizenship or immigration status
- Financial information
While many users expressed distress about TikTok collecting citizenship information—particularly amid former President Donald Trump's deportation initiatives—this practice isn't entirely new. According to the internet archive Wayback Machine, TikTok's 2025 policy already permitted collection of similar sensitive data.
"Just because it isn't new doesn't mean it isn't bad," Schroeder commented regarding TikTok's sensitive information policy. "The immigration factor is a real concern."
She noted that U.S. companies frequently receive law enforcement requests for account information, with some organizations complying. Even being tagged in a post could provide investigative leads for authorities.
Legal Framework and International Data Transfers
TikTok states it will process sensitive data "in accordance with applicable law, such as...under the California Consumer Privacy Act," which grants California residents rights to request corrections or deletions of inaccurate personal information. Schroeder interpreted this policy language as essentially meaning "We'll process it in any way that's legal," highlighting concerns about inconsistent privacy protections across the United States.
Currently, privacy regulations vary significantly between states, with numerous exceptions and carve-outs creating a fragmented legal landscape. When HuffPost inquired about TikTok's handling of sensitive information like citizenship status in response to law enforcement requests, the company referenced its transparency report, stating that "Any request we receive is carefully reviewed on a case-by-case basis. Our policies and procedures govern how TikTok handles and responds to law enforcement requests and require that TikTok discloses or preserves user data only where a request is based on a valid legal process or in emergency circumstances."
Beyond domestic concerns, international data transfers present additional privacy considerations. Mario Trujillo, Electronic Frontier Foundation Senior Staff Attorney, observed that "Like many other tech companies, TikTok's policies center on collecting tons of your sensitive personal data. And even today, the company continues to reserve the right to transfer your data to its business partners outside the United States," citing the platform's current data retention policies.
User Responses and Privacy Advocacy
Some individuals have responded to TikTok's perceived overreach by deleting their accounts—a strategy that privacy experts confirm can effectively limit what application developers know about users. Those wishing to manage their TikTok data can complete a dedicated form to access, correct, or delete information the platform maintains.
Schroeder suggested that mass account deletions could "send a big message" to technology companies about user privacy expectations. Regardless of individual decisions about TikTok usage, privacy specialists express appreciation that the platform's pop-up notification has prompted more people to scrutinize the lengthy, often confusing terms governing how companies utilize personal data.
Kamide remarked that "This is the level of scrutiny that every app should get, but understandably does not." Schroeder added that "Most apps and services that you engage with are collecting much more information about you than you think, and they hide it all in these terms and services that they know you don't read. It's an industry norm that we've accepted for a long time, and it's never made a ton of sense or been a good practice."
