PayPal

One of the broadest collection profiles of any service reviewed — spanning financial data, biometrics, precise GPS, browsing habits, inferred income, and data purchased from brokers.

Data flows to credit bureaus, debt collectors, fraud agencies, financial institutions, merchants, and advertising partners — some legally mandated, much of it not.

Ten-year post-closure retention and opt-in-by-default merchant sharing are the headline concerns — partially offset by 30-day policy change notice and EU Binding Corporate Rules.