"Authy (Twilio) exhibits high privacy risk (68/100) due to extensive collection of sensitive data including communications content, government IDs, and call recordings used for AI/ML model training, combined with broad third-party sharing with partners, law enforcement, and data enrichment services. Cross-device identity resolution and automated account suspension decisions without prior notice further elevate risk. While opt-out mechanisms exist for marketing and cookies, vague retention periods and account deletion consequences create significant user control limitations."
authy Privacy Concerns & Scorecard
Automatic real-time automated decision-making for account suspension without prior notice. Users can object but notification comes after suspension, not before. Account deletion is permanent and may impact service access.
Extensive collection of sensitive data including communications content, government-issued IDs, call recordings, financial information, and geolocation data. AI/ML models trained on customer data including email body, text body, and transcribed conversations.
Cross-device identity resolution and targeted advertising via cookies, pixels, and web beacons. Facebook pixel tracking embedded in privacy policy itself. Email engagement tracking via web beacons in marketing communications.
Data shared broadly with event partners, co-sponsors, marketing partners, ISVs, MSPs, data enrichment services, telecommunications operators, and corporate transaction parties. Identity resolution creates unified profiles across devices shared with partners.
Vague retention periods with data retained 'as long as needed to provide Services and operate business' without specific deletion timelines. Data lifecycle processes vary by type but lack transparency.
Limited detail on verification requirements that may restrict access to privacy rights. Children's accounts deactivated and deleted without explicit parental consent framework clearly documented.
No recommended actions at this time.
Automate your privacy
Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.
Data Collection & Tracking
Personal Information Collected
Account creation, identity verification, fraud prevention, professional networking
Payment processing, billing, fraud detection
Service delivery, customer support, fraud detection, AI/ML model training
Fraud prevention, security monitoring, analytics, cross-device tracking
Fraud prevention, analytics, localization, anti-fraud geofencing
Service optimization, marketing, analytics, personalization, fraud detection
Identity verification, fraud prevention, data enrichment, profile enhancement
Marketing communication, event management, lead generation, preference management
Service delivery, fraud prevention, regulatory compliance
Cross-Platform Tracking
Authy uses identity resolution to create unified profiles across multiple devices and touchpoints, tracking your activity across platforms. Facebook pixel tracking is embedded in their privacy policy and marketing materials, enabling conversion tracking and cross-site behavioral monitoring. Web beacons in marketing emails track opens and clicks across email clients and devices.
Tracking Methods:
Tracking Pixels
Facebook pixel and web beacons embedded in privacy policy and marketing materials for conversion tracking and cross-site behavioral monitoring
Cookies
Functional and advertising cookies used to track user preferences, deliver targeted ads, and maintain user sessions across devices; preferences reset when cookies are cleared
Web Beacons
Web beacons in marketing emails track email opens and clicks; enables email engagement analytics
Identity Resolution
Cross-device identity resolution creates unified profiles linking user activity across multiple devices and touchpoints
Device Fingerprinting
Collection of device identifiers, browser type, OS, and other signals to create unique device fingerprints for fraud detection and tracking
Login Tracking
Login history and IP addresses collected and stored for security monitoring and fraud detection
AI & Data Training
authy uses your content to train AI
Below is what's used and how (if at all) you can object.
What Content Is Used
Email Content
Email message body text used for AI/ML training for fraud detection
Text Messages
SMS and text message body content used for AI/ML training for fraud detection
Call Transcripts
Transcribed voice calls and support conversations used for AI/ML training
Call Recordings
Call recordings with support agents used for AI/ML training and fraud detection
Support Conversations
Transcribed AI chatbot conversations and customer support interactions used for AI/ML model training
How to Object
No opt-out available
This service does not currently provide a public way to opt out of AI training.
Why We Analyzed authy
TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.