TikTok users across the United States have reacted with alarm to an updated privacy policy issued following the platform’s change in ownership, after receiving in app notifications drawing attention to the revised terms. The policy outlines how the US based joint venture may collect and process user data, including location information and categories described as sensitive personal information. Screenshots of the policy quickly circulated on social media, with some users expressing fear that the platform could misuse deeply personal data.
Much of the concern centers on language stating that TikTok may process information related to users’ sexual life or sexual orientation, gender identity, citizenship or immigration status, health information, and other personal details. However, legal experts say this wording is not new and does not signal an expansion of TikTok’s data practices. Similar language appeared in earlier versions of the policy before the ownership deal was completed and mirrors disclosures found in other major social media platforms.
The wording is largely driven by state level privacy laws, particularly in California. Laws such as the California Consumer Privacy Act and the California Privacy Rights Act require companies to explicitly inform users if they collect or process what the law defines as sensitive personal information. These categories are broad and include data that may appear in user generated content, survey responses, or communications shared voluntarily on the platform.
Recent political developments have amplified user anxiety around such disclosures. Heightened immigration enforcement actions and public protests in parts of the country have made references to citizenship and immigration status especially sensitive. As a result, many users are reading TikTok’s privacy policy through a climate of mistrust, even though the language itself predates these events.
Legal practitioners note that TikTok is attempting to limit liability by clearly spelling out the types of information it may process and by committing to do so in accordance with applicable law. According to privacy lawyers, companies increasingly face lawsuits alleging unlawful collection of sensitive data, and detailed disclosures are often used as a defensive measure. The policy explicitly references compliance with state privacy laws as part of this approach.
While some users have threatened to delete their accounts, experts emphasize that the policy does not mean TikTok is actively profiling users or extracting private details beyond what individuals choose to share. Rather, it reflects the reality that social media platforms technically collect and process the content users upload. Still, critics argue that the blunt legal language, written for regulators and courts, can be unsettling for everyday users and highlights the growing tension between data regulation, platform transparency, and public trust in digital services.