HTML Editor Component
*Contents may not have visible height

HTML Editor Component
*Contents may not have visible height

Effective July 2, 2025
Print the full Privacy Notice

AT&T Privacy Notice

Thank you for reading our Privacy Notice. Your privacy is important to you and to us. This notice explains how we use your information and keep it safe.  

Importantly, this notice explains the choices you can make at any time about how your information may be used.

This notice applies to your interactions with AT&T and its products and services including internet, wireless, voice, and AT&T apps. We will tell you if a different notice applies. For example:

  • Cricket has its own privacy notice.
  • AT&T business customers may have a service agreement that covers the handling of their information. The service agreement controls if it is different from this Privacy Notice.
  • For AT&T business customers outside the United States, the AT&T Business Customer Privacy Notice – Most of World governs if it is different from this Privacy Notice.​

Please make sure everyone who uses your account knows they are covered by this notice.

HTML Editor Component
*Contents may not have visible height

We've recently updated our Privacy Policy.
Learn more about the updates or read the prior version.
We've recently updated our Privacy Policy.
Learn more about the updates or read the prior version.

To better run our business, we collect information about you, your equipment, and how you use our products and services. This includes:

  • Account information. Information you give us about yourself, such as contact and billing information, service-related history and details, including Customer Proprietary Network Information.
  • Equipment information. Information about equipment on our network like the type of device you use, device ID, and phone number.​
  • Network performance. We monitor and test the health and performance of our network. This includes your use of Products and Services to show how our network and your device are working.​
  • Location information. Location data is automatically generated when devices, products and services interact with cell towers and Wi-Fi routers. Location data can also be generated by Bluetooth services, network devices and other technology, including GPS satellites. ​
  • Web browsing and app information. We automatically collect a variety of information, which may include time spent on websites or apps, website and IP addresses and advertising IDs, links and ads seen, videos watched, search terms entered, and items placed in online AT&T shopping carts. We may use pixels, cookies, and similar tools to collect this information. We don’t decrypt information from secure websites or apps – such as passwords or banking information.​
  • Biometric information. Fingerprints, voice prints, and face scans are examples of biological characteristics that may be used to identify individuals. Learn more in our Biometric Information Privacy Notice.
  • Third-party information. We get information from outside sources like credit reports, marketing mailing lists, and commercially available demographic and geographic data. Social media posts also may be collected, if you reach out to us directly on social media or mention AT&T. Sometimes this data is de-identified, aggregated, or anonymized.​

All these types of information are considered personal information when they can reasonably be linked to you as an identifiable person or your household. For instance, information is personal when it can be linked to your name, account number, or device.

We rely on the information we collect to support our business functions, power our services, and improve your experience, such as when we:

  • Provide our products and services.
  • Contact you.
  • Improve your experience and safety. This includes verifying your identity, detecting and preventing fraud, protecting your financial accounts, authorizing transactions and assisting your interactions with us.
  • Improve and protect our network.
  • Use it to help understand which additional products and services may interest you and others, including combining it with the information from testing and running our network. (We don’t access or use the content of your texts, emails or calls for this or any other marketing and advertising, but we may use your communications directly to us for these purposes.)
  • Design and deliver advertising, marketing and promotional campaigns to you and others – and measuring their effectiveness (See your choices).
  • Use it for billing, collection, and protection of our property and legal rights.
  • Prevent and investigate security issues, illegal activities and violations of our terms and conditions.
  • De-identify, aggregate, or anonymize it to protect your privacy and security. We don’t try to re-identify this data or associate it with an individual person except to evaluate the effectiveness of our de-identification policies and procedures.
  • Conduct research and create aggregated reports – reports that offer insights about groups of customers, but not individuals (we do not attempt to re-identify individuals in aggregated reports).

As described in the following paragraphs, AT&T shares information among the AT&T family of companies. We also share with non-AT&T companies.

AT&T affiliates. We share information that identifies you personally with our affiliates, such as Gigapower and Cricket. When we share this information, they must follow this Privacy Notice regarding your information, not just their own notice. This includes the privacy choices you make with AT&T.

AT&T affiliates and non-AT&T companies for advertising and marketing. We may share information with affiliates and other companies to deliver our ads and marketing or to assess their effectiveness. In some instances, we may share your information with non-AT&T companies that combine your information with theirs to better identify audiences and deliver ads on behalf of advertisers, including AT&T, (Learn more about our ad programs and see your choices.)

Non-AT&T companies providing a service. We use suppliers for services like marketing, billing, and to support our products. When we share your information with suppliers, we require them to use it only for the intended purpose and to protect it consistent with this notice.

Non-AT&T companies for identity verification. We share your information with companies such as your bank to protect you from fraud, authenticate your identity, protect your financial accounts and authorize transactions. When we share for this purpose, we require them to use it only for the intended purpose and to protect it, consistent with this notice. (Learn more and see your choices, including your right to decline this service.)

Non-AT&T companies and non-branded affiliates with your consent. If we have your opt-in consent, we may share your information, consistent with your direction.​

Non-AT&T companies or entities where authorized or required by law. This can happen when we:

  • Comply with court orders, subpoenas, and lawful discovery requests, and as otherwise authorized or required by law. Like all companies, we must comply with legal requirements. You can learn more in our Transparency Report.
  • Detect and prevent fraud.
  • Provide or obtain information related to payment for your service.
  • Route your calls or other communications, like connecting calls or text messages with other carrier networks.
  • Facilitate network operations and security, defend against legal claims and enforce our legal rights.
  • Provide information (including location) to an appropriate governmental entity in emergency circumstances such as immediate danger of death or serious physical injury.
  • Alert the National Center for Missing and Exploited Children to information concerning child pornography if we become aware through the provision of our services.​
  • Share the names, addresses, and telephone numbers of non-mobile phone customers with phone directory publishers and directory assistance services as required by law. We honor your request for non-published or non-listed numbers.
  • Provide name and phone number for wireline and wireless Caller ID and related services like Call Trace.

Non-AT&T companies for metrics, insights and research. We may share aggregated (grouped) data that does not identify you personally for these purposes. We require that companies and entities agree not to attempt to identify individuals – or allow others to do so. We share in this manner for:

  • Metrics: Sometimes you enjoy a service from us that directly involves another business. For instance, we might provide the Wi-Fi service at a place you visit. As part of our service, we may provide aggregate metrics reports to that business about how the Wi-Fi is being used, such as aggregated location and web-browsing data. It can only be used for group insights.
  • Insights: We may share aggregated data about our network, operations or services.
  • Research: We require researchers to handle the data securely and not use it for other purposes or further share it.

Non-AT&T companies for location services. With your consent, we may share your location information for traffic and mapping apps and other location services to which you subscribe. We share only with your consent, unless required by law. Keep in mind:

  • You may give your consent to us, or you may give it directly to another company – like a medical alerting device company.
  • If you give it directly to another company, that company governs the use or disclosure of location.
  • In some cases, such as parental controls, consent may come from the AT&T account holder and not the individual user.

You can manage how we use and share your information for certain activities including advertising and marketing. Here are key examples:

Sharing or selling my personal information. We may share limited information to create, deliver, and measure advertisements for things you might like. This includes targeted advertising, which may be based on personal information obtained from your interactions with other businesses. We also share information in ways that may be considered a sale of information under some state laws, such as exchanging subscriber lists for marketing or sharing identifiers and other information with non-AT&T advertising companies to target and deliver ads on behalf of advertisers, including AT&T. We do not sell your Sensitive Personal Information.

You can ask us to stop at any time, just:

We recognize and honor the preference signal associated with a Global Privacy Control.

Access, delete and correct your personal information. You can ask to see what personal information we have about you. You can also ask us to delete or correct it. And if we deny your request, you have the option to appeal our decision.

  • Access and Portability. If you want to see the personal information we’ve collected, you can ask us for it. We will describe the categories of information we collect, the specific pieces we’ve collected, the sources of the information, the purposes for collecting, sharing or selling it and the categories of non-AT&T companies with which we shared or sold it. You can also ask to “port” your data, which means you get a copy that you can take with you.
  • Delete. You can ask us to delete your personal information. In keeping with various state laws, please know that we will still keep data needed for things like running the business, security and fraud protection, compliance with legal obligations, and marketing our products and services to our own customers.
  • Correct. You can ask us to correct inaccurate personal information we have about you. We’ll ask you to provide documentation to support the correction and let you know the result.

To access, delete, or correct your information, visit our Choices and Controls page. California residents can also contact us at (866) 385-3193. Helpful details about the process can be found at our Data Request Center, including your option to appeal. We don’t mind if you make access, deletion, or correction requests, or ask us not to sell or share your information. These are rights under certain state laws, and we have extended their availability across the U.S., regardless of where you live.

Depending on your state of residence, you may have additional privacy choices. Just visit our State Law Approach page and scroll to your state to learn more.

As required by California law, you can review information specifically about California requests from the previous calendar year on our California metrics page. We also follow state requirements within California regarding businesses and those that provide work for us.

Personalized and Personalized Plus

AT&T has two programs that use your personal information to help customize your experience. For instance, you might be shown an online advertisement that is more relevant to your interests, rather than a general ad.

You can choose to participate or not – and it’s never a problem if you change your mind. You are automatically enrolled in the Personalized program, but you can always opt out. You must opt in to join Personalized Plus. Choices for both programs can be made at att.com/PrivacyChoices.

Here is a comparison of the programs:

Data Use or Sharing Description

Personalized

Personalized Plus

Uses data about your use of our products and services, including data from apps.

Uses demographic data like age range and ethnicity* that we purchase from third parties.

Uses data from our advertising partners.

Uses automated decision-making, such as artificial intelligence.

Does not use information about your medical conditions or financial account information.

Does not access or use the contents of your texts, emails or calls.

May use precise location and Customer Proprietary Network Information for marketing and advertising.

May use web browsing we collect as your internet provider for marketing and advertising and infer websites you visit over a secured connection.

*If you live in certain states, we won’t collect, use, store or share your sensitive personal information for marketing and advertising unless you join Personalized Plus. This includes information like ethnicity and racial origin. The states are Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah and Virginia.​

If you join the Personalized Plus program, it is an extension of the Personalized program, so you will be enrolled in both. But you can always stop the sharing or selling of your personal information at att.com/privacychoices or our Choices and Controls page.

More choices and controls

Customer Proprietary Network Information (CPNI). CPNI is information related to the telecommunications services you purchase from us, such as which subscription plan you have and details about who you called. Your phone number, name and address are not CPNI. It is your right and our duty under federal law to protect the confidentiality of your CPNI.

You can choose whether we use your CPNI internally for marketing – such as helping to offer you new services and promotions. 

You can opt out at att.com/cpni/optout. You can also call us any time at (800) 315-8303 and follow the prompts. Or you can talk to a service representative at (800) 288-2020 (consumer) or (800) 321-2000 (business).

We don’t share CPNI outside of our AT&T affiliates, agents, and suppliers without your consent, except for court orders, fraud detection, providing service, network operations, and security; aggregate (grouped) information that doesn’t identify you personally and as otherwise authorized by law.

I​f you choose to restrict our use of CPNI, it won’t affect your services. We keep your choice until you change your mind, which you can do at any time. Keep in mind, if you restrict use of your CPNI, you may still get marketing from us.

Identity verification. Non-AT&T companies like your bank may receive limited information from us to help protect your accounts from fraud, verify your identity and make sure it’s really you authorizing a transaction. We do not allow these non-AT&T companies to use your information for any other purpose. You are generally enrolled through the non-AT&T company, but you can stop at any time through us. Text “STOP” to 8010 to turn off Identity Verification, or text “RESUME” to restart. Or manage your choices at att.com/PrivacyChoices.

Contact preferences. We like to tell you about offers and programs that may interest you. You can manage how we do that. Keep in mind that we still may need to contact you with service and non-marketing messages. Please visit Contact Preferences for more information and links.

Industry choices and controls

Online behavioral advertising. You have industry-wide choices about online, interest-based advertising.

Companies including AT&T may use cookies, mobile advertising identifiers, and other technologies to collect information about your use of websites including ours. This information can be used to analyze and track online activity or deliver ads and content tailored to your interests.

You can opt out of online behavioral advertising from companies that participate in the Digital Advertising Alliance. Go to their Consumer Choice Page. You can also select this icon when you see it on an online ad.

  • You can limit collection of data on websites by managing cookies and similar technologies on your computer. Remember that if you change computers, devices, or web browsers, or if you delete cookies, you will need to manage them again.

At AT&T, please note that when we collect web browsing information as an internet service provider, it works independently of your web browser’s cookie and private browsing settings that interact with online behavioral advertising. You can manage AT&T’s use of web browsing information – such as our Personalized Plus program – at att.com/PrivacyChoices.

We don’t currently respond to Do Not Track. Please go to All About Do Not Track for more information.

Unless you join our Personalized Plus ad program, we don’t knowingly allow non-AT&T companies to collect your personally identifiable activity on our websites for their own use and tracking.

We keep your information as long as we need it for business, tax, or legal purposes. We set our retention periods based on things like what type of personal information it is, how long it’s needed to operate the business or provide our products and services, and whether it’s subject to contractual or legal obligations. These obligations might be ongoing litigation, mandatory data retention laws or government orders to preserve data for an investigation. After that, we destroy it by making it unreadable or indecipherable.

We work hard to safeguard your information using technology controls and organizational controls. We protect our computer storage and network equipment. We require employees to authenticate themselves to access sensitive data. We limit access to personal information to the people who need access for their jobs. And we require callers and online users to authenticate themselves before we provide account information.

No security measures are perfect. We can’t guarantee that your information will never be disclosed in a manner inconsistent with this notice. If a breach occurs, we’ll notify you as required by law.

HTML Editor Component
*Contents may not have visible height

Contains bookmark id for Other Privacy Information

Other privacy information

This chart shows the personal information that we collect, along with the purpose for its collection.

This chart shows the personal information we shared or sold over the past year about at least some consumers. It also shows the purpose for which we shared or sold it. Some states define “sale” very broadly.

This chart shows the sensitive personal information we’ve collected about consumers over the past year, including the purpose for its collection and sharing. AT&T does not sell your Sensitive Personal Information.

Information about you may be shared or transferred if AT&T is part of a merger, acquisition, sale of company assets or lines of business, or transition of service to another provider. Information could also be shared in the unlikely event that our business were to become insolvent or bankrupt or were put into receivership.​

We update this Privacy Notice as necessary to reflect business changes and satisfy legal requirements. We post a prominent notice on our websites of any material changes. We give you reasonable notice before any material changes take effect.

We only use our business customers’ user information for marketing or advertising when we market business products and services, including apps and devices. However, we may use our relationship with you to qualify you for certain deals on consumer products and services. You can call the toll-free number on your bill to see whether your current products and services are billed as business or consumer.​

We don’t knowingly collect personal information from anyone under 18 without parental notice, and we get parental consent where appropriate. We also won’t contact a child under 18 for marketing purposes without parental consent. However, if we are not aware that a child is using a service or device purchased by an adult, we may collect the information and treat it as the adult’s. (See your privacy choices.)

We do not sell personal information of anyone we know who is under 18, unless we receive affirmative permission to do so. If a child is under 18 and at least 13, the child may provide the permission.​

We provide additional disclosures regarding certain products and services where we have reason to believe that we are collecting and using information from children under 18. For more information, please review our AT&T Privacy Notice for Children’s Products and Services.

You can contact us with questions about this notice. You can also write us at AT&T Privacy Notice, Chief Privacy Office, 208 S. Akard, Room 2901, Dallas, TX, 75202.

If you have questions not related to privacy, click on the “Contact Us” link on the bottom of any att.com page.

You can access your online account from the upper right-hand corner of our home page at att.com.

If you’re not satisfied with our resolution of any dispute, including privacy and personal information concerns, you can learn about our dispute resolution procedures on our dispute resolution page.

You also have the option to file a complaint with the FTC Bureau of Consumer Protection using an online form or calling toll-free to 877.FTC.HELP ((877) 382.4357; TTY: (866) 653.4261). Other rights and remedies also may be available to you under federal or other laws.

HTML Editor Component
*Contents may not have visible height

HTML Editor Component
*Contents may not have visible height

As of July 2, 2025, we’ve removed DIRECTV from our affiliate list and clarified how your data is used in digital advertising.  We always give you choices, visit the Choices and Controls section of Privacy Center.

Previous Updates

Effective November 15, 2024, we updated our Privacy Notice to comply with state privacy laws that go into effect in 2025 and clarified how customers can exercise their sharing preferences.

Previous Updates

Effective July 25, 2024, we clarified our disclosures related to Your Privacy Choices and our use of de-identified data. And we noted that we may share audio recordings with analytics companies to provide better insights on how we serve our customers.

Previous Updates

Effective July 17th, we updated the contact information for questions regarding our privacy notices.

Previous Updates

This updated Privacy Notice is effective December 11, 2023. It is shorter, easier to understand, and includes updates to comply with new state privacy laws.

Previous Updates

Effective June 2, 2023, we clarified that phone number is an example of equipment information collected.

We are committed to providing you transparency by letting you know when we've made changes to our policy. We truly value your business.

Previous Updates

Effective October 24th, our analytics tools include data from all managers.

 

Effective July 17th, we updated the contact information for questions regarding our privacy notices. Also, on July 22nd we noted that for some employees our analytics tools may use individual data.

 

Effective April 19, 2024, we updated the notice to clarify that we collect and use location data for safety, security and fraud prevention services. We’ve also updated this notice to disclose that we share some electronic network information with our affiliates, and we will now use the recordings we already make of customer care calls to analyze employee engagement and for Workforce Analytics.

Previous Updates

 

Effective January 12, 2024, we updated this notice to clarify that data from Company Official Use (COU) devices such as COU phones may be used to evaluate employees’ presence in administrative office locations during work hours.

Previous Updates

 

Effective October 10, 2023, we updated this notice to clarify that biometrics may be used to identify individuals doing work for the company.

We are committed to transparency, so we want you to know we’re updating the AT&T Privacy Policy, effective January 1, 2023:

  • We’re making customer choices simpler. All customers can now select “Do Not Sell or Share My Personal Information,” and we’re removing the specific opt-out for External Marketing and Analytics Reports, which only share information that is already aggregated (grouped), meaning they don’t identify individuals.
  • We’ve expanded our section on State Privacy Rights and Choices. It includes categories and examples of information we collect, create and share. It also explains choices available to you to manage your information.
  • We’ve updated the names, descriptions and terms of our ad programs. Our “Personalized” program replaces “Relevant Advertising” and provides you offers and ads that are relevant to your interests. “Personalized Plus” replaces “Enhanced Relevant Advertising” and uses more of your information for more relevant communications to you. You can opt out or opt in at any time.

Previous Updates

Effective June 6, 2022, we have removed references in our policy to Xandr. This is in addition to the removal of WarnerMedia and its family of companies that was announced on April 8, 2022 as these entities are no longer affiliates of AT&T.

We are committed to providing you transparency by letting you know when we’ve made changes to our policy. We truly value your business.

Previous Updates

Effective April 8, 2022, we have removed references in our policy to WarnerMedia and its family of companies as they are no longer affiliates of AT&T.

We are committed to providing you transparency by letting you know when we’ve made changes to our policy. We truly value your business.

Previous Updates

We are committed to transparency, so we want you to know we’ve made an update to the AT&T Privacy Policy.

Effective November 1, 2021, we removed references to U-verse TV from our policy as that service is now covered by the DIRECTV Privacy Policy.

We value your business, and thank you for being a customer of AT&T.

Previous Updates

On June 16th, we updated the California Consumer Privacy Act section of our privacy policy.

  • We clarified the types of information collected and the purposes for that collection.
  • We provided a link to our CCPA Metrics.
  • See the prior version of the Privacy Policy.

Previous Updates

In keeping with our commitment to transparency, we want you to know that we’ve updated parts of the AT&T Privacy Policy. We encourage you to read our full policy, but we’ve summarized the key changes.

On October 1, 2021, the Nevada Privacy law went into effect, allowing residents of Nevada to ask us not to sell their personal information. To see more, visit Your Choices and Controls.

Previous Updates

As of August 26, 2021, DIRECTV has its own Privacy Policy.

As of November 1, these additional key changes will take effect for AT&T customers under our revised policy:

  • We may collect, use or share biometric information for fraud prevention and security purposes.
  • If you opt in to our Enhanced Relevant Advertising program, we may use other information from testing and running our network to make inferences regarding web browsing and videos watched over secure connections to personalize your experience or deliver more relevant marketing messages and offers to you. Keep in mind that we don’t access sensitive information or break encryption, and we don’t use the content of texts, emails or phone calls for marketing or advertising.
  • If we share information with third parties for purposes such as verifying your identity and protecting your financial accounts, you can manage this sharing of information simply by going to Manage Privacy Choices.

We are committed to keeping your information secure, as well as providing you with Choices and Controls for how your information is used. You can visit the Choices and Controls section of our Privacy Center at any time to adjust your settings. Your service is not affected by these changes, and your continued use of our services indicates your acceptance of these changes.

We value your business, and thank you for being a customer of AT&T.

Previous Updates