"NerdWallet exhibits high-risk privacy practices comparable to Google/Microsoft-tier services (55-70 range). The service collects extensive sensitive financial data including SSNs, bank accounts, and investment information, then shares this with unspecified data brokers, credit bureaus, and advertising networks for marketing and profiling purposes. Combined with indefinite data retention after account closure, fragmented opt-out mechanisms, and unclear AI training practices, users face significant risks of financial fraud, identity theft, and behavioral manipulation."
nerdwallet Privacy Concerns & Scorecard
Unrestricted sharing of sensitive financial and identity data with unspecified third-party data brokers (Acxiom, Spinwheel), credit bureaus (TransUnion, Experian, Equifax), and financial aggregators (Plaid, QuinStreet, Media Alpha) without per-instance consent.
Collection of highly sensitive financial identifiers including complete Social Security numbers, driver's license numbers, government-issued ID, vehicle identification numbers, complete bank account information, and investment account statements. This data enables identity theft and financial fraud if compromised.
Opt-out mechanisms are fragmented and device/browser-specific. Users must manually opt out through separate third-party portals (NAI, DAA, Google) and then repeat across each device and browser, creating practical barriers to opting out.
Cross-device and cross-browser behavioral tracking using targeting cookies, web beacons, mobile advertising identifiers, and third-party buttons to build interest profiles and display retargeted ads across the internet.
Indefinite data retention after account deactivation. Policy explicitly states: 'Information may be retained indefinitely if technical, legal, or regulatory reasons prevent deletion' and 'Archived copies may be retained even after deregistration'.
No recommended actions at this time.
Automate your privacy
Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.
Data Collection & Tracking
Personal Information Collected
Account creation, identity verification, fraud prevention, and credit verification
Financial aggregation, product recommendations, and personalized financial advice
Auto insurance quotes and vehicle valuation
Localized product recommendations and service delivery
Service operation, analytics, fraud prevention, and cross-device tracking
Personalization, analytics, targeted advertising, and AI model training
Customer service, marketing, and legal compliance
Targeted advertising and profiling
Account authentication and profile enrichment
Business financial management and product recommendations
Cross-Platform Tracking
NerdWallet tracks you across browsers and devices using cookies, mobile advertising identifiers, and device fingerprints. Your online activity is linked to your identity and followed across different sites and apps to build a profile of your financial interests and behavior for targeted advertising purposes.
Tracking Methods:
Cookies (Session & Persistent)
First-party and third-party cookies set by NerdWallet and advertising partners to track user behavior, remember preferences, and enable targeted advertising across browsers and websites
Web Beacons & Tracking Pixels
Invisible tracking elements embedded in emails and web pages that collect data on whether content was viewed, when it was viewed, and from what device
Mobile Advertising Identifiers
Device-level identifiers (IDFA on iOS, AAID on Android) that enable cross-app tracking and attribution of user behavior across mobile apps and websites
Third-Party Buttons & Plugins
Facebook, Twitter, and other third-party buttons embedded on NerdWallet site that automatically track users even without explicit interaction
Device Fingerprinting
Collection and combination of device characteristics (hardware, software, settings) to create unique device identifier enabling cross-browser tracking without cookies
Financial Account Linking (Plaid)
Plaid SDK embedded in NerdWallet to connect and aggregate data from external bank and investment accounts, tracking which accounts are linked and monitored
Terms of Service Updates
New websites and financial services added to NerdWallet platform
NerdWallet expanded its covered websites to include www.collegefinance.com, refirate.org, and capablestudentloans.com, and added new service categories including third-party data aggregation services, automated investing, treasury accounts, and cash accounts. This materially expands the scope of services governed by these Terms.
Effective: August 4, 2026
Forum content licensing terms removed from visible ToS
The previous version included detailed Section 2(c) with forum content licensing granting NerdWallet royalty-free, perpetual rights to user-submitted content. This section is completely removed from the new version, though the Forums section itself is also absent, suggesting either discontinuation of forums or relocation of these terms.
Effective: August 4, 2026
NerdWallet Advisory services terms substantially revised
The new version removes reference to Quinn financial planning partnership with Hyve, Inc. and instead emphasizes that NerdWallet Advisors is SEC-registered and operates a 'Match' service connecting users with third-party providers for compensation. It adds explicit disclosure that NerdWallet Advisors does not provide direct financial advice and adds a new section for NerdWallet Wealth Partners as a separate SEC-registered adviser.
Effective: August 4, 2026
AI & Data Training
nerdwallet uses your content to train AI
Below is what's used and how (if at all) you can object.
What Content Is Used
AI Tool Interactions
User interactions with NerdWallet's AI-powered features and tools are collected and used for AI model training
How to Object
No opt-out available
This service does not currently provide a public way to opt out of AI training.
Why We Analyzed nerdwallet
TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.