Cricket Wireless LLC is AT&T's prepaid wireless brand, operating directly on AT&T's own network rather than as an MVNO reseller; AT&T Inc.'s SEC-filed subsidiary exhibit lists Cricket Wireless LLC as a Delaware entity under AT&T Mobility, and Cricket's own privacy notice states plainly that 'Cricket is an AT&T company.' Cricket's privacy notice (effective May 27, 2026) describes broad, conventional carrier collection -- account and equipment data, Customer Proprietary Network Information (CPNI), biometric identifiers used for fraud checks, and cookies/mobile advertising identifiers used for targeted ads -- while stating it will not sell, rent, trade, or license specific personal or financial information, and separately self-declares that certain identifier-sharing with advertising companies constitutes a 'sale' or 'share' under state privacy laws, for which it offers an opt-out. The myCricket app's App Store privacy label declares only the 'Data Not Linked to You' category, with no 'Data Linked to You' or 'Data Used to Track You' categories disclosed. Cricket's track record is governed by its parent: the FCC fined AT&T over $57 million in April 2024 for illegally sharing customers' real-time location data with data aggregators without consent, and AT&T disclosed in a May 2024 SEC filing that a cybersecurity incident exposed call and text metadata for 'nearly all' of its wireless customers (covering the periods May-October 2022 and January 2023).
TRACK RECORD
1 ENFORCEMENT ACTION
[2024-04-29]
The FCC announced on April 29, 2024 that it fined the nation's largest wireless carriers, including AT&T (Cricket's parent and network operator), for illegally sharing access to customers' real-time location data with aggregators without consent and without reasonable safeguards against unauthorized disclosure; AT&T's fine exceeded $57 million.
Cricket Wireless's Privacy Notice (effective May 27, 2026) states it collects account information (contact and account details, CPNI), equipment information (device type, device ID, phone number), network performance data, biometric information (fingerprints, voice prints, face scans, described further in a separate Biometric Information Privacy Notice), and third-party-sourced information such as credit reports and marketing mailing lists.
AT&T Inc.'s Exhibit 21 (Subsidiaries of the Registrant) to its Form 10-K for fiscal year 2025, filed with the SEC, lists 'Cricket Wireless LLC' as a Delaware entity with the same immediate parent as the preceding subsidiary row, New Cingular Wireless PCS, LLC -- listed as AT&T Mobility -- confirming Cricket Wireless LLC's place in AT&T's mandatory SEC-filed corporate structure.
Cricket's Privacy Notice states directly that Cricket is a corporate affiliate of AT&T and shares information within the AT&T corporate family, with those affiliates bound by Cricket's own notice when Cricket shares information with them.
The Privacy Notice states Cricket will not sell, rent, trade, license, or otherwise disclose specific personal or financial information to third parties and does not sell sensitive personal information, but it separately discloses that exchanging subscriber lists for marketing or sharing identifiers with non-Cricket advertising companies (to deliver ads on behalf of advertisers including AT&T and Cricket) is treated as a 'sale' of information under some state laws, for which it provides a Do Not Sell or Share opt-out.
The FCC announced on April 29, 2024 that it fined the nation's largest wireless carriers, including AT&T (Cricket's parent and network operator), for illegally sharing access to customers' real-time location data with aggregators without consent and without reasonable safeguards against unauthorized disclosure; AT&T's fine exceeded $57 million.
AT&T Inc.'s Form 8-K filed May 13, 2024 discloses a material cybersecurity incident in which threat actors exfiltrated files from an AT&T workspace on a third-party cloud platform between April 14 and April 25, 2024, containing call and text interaction records for 'nearly all' of AT&T's wireless customers and MVNO customers on AT&T's network, covering periods between approximately May 1 and October 31, 2022, and on January 2, 2023.
The myCricket app's Apple App Store privacy label (fetched live, app ID 626392754, publisher Cricket Wireless, LLC) declares only the 'Data Not Linked to You' privacy type -- covering purchases, financial info, coarse location, contact info, user content, search history, identifiers, usage data, and diagnostics used for analytics -- with no 'Data Linked to You' or 'Data Used to Track You' categories present in the fetched page.
The same Privacy Notice states that Cricket and other companies may use cookies, mobile advertising identifiers, and other online tracking technologies to collect information about website use for analysis, tracking, and tailored ad delivery, and separately states Cricket does not currently respond to Do Not Track browser signals.