Fidelity Investments is a privately held (Johnson family) financial services firm operating under FMR LLC, offering brokerage, retirement, and wealth-management products through fidelity.com and its mobile app. Its online privacy policy and GLBA notice disclose broad collection of financial, contact, and behavioral data, first- and third-party advertising cookies from vendors including Google, Meta, and Microsoft, and a CCPA 'Do Not Sell or Share' mechanism that implicitly concedes some sharing counts as a sale/share under California law even though Fidelity states it does not sell data for payment. Its GLBA notice discloses sharing for everyday business and its own marketing with no opt-out, but states it does not share for joint marketing, affiliates' creditworthiness, or with nonaffiliates to market. The Fidelity Investments App Store label discloses an explicit 'Data Used to Track You' category (Purchases, Search History, Identifiers, Usage Data) plus an extensive 'Data Linked to You' list spanning financial, location, and contact info. In October 2024, Fidelity disclosed via a Maine attorney-general filing that an unauthorized third party had used two newly created customer accounts to access data belonging to over 77,000 customers between August 17-19, 2024, with no access to customer accounts themselves.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
8 ON FILE
COLLECTION
The Fidelity Investments App Store privacy label (self-reported by the developer) lists an extensive 'Data Linked to You' category set — including Financial Info, Location, Contact Info (physical address, email, phone), Search History, Identifiers, and User Content — tied to purposes spanning Developer's Advertising/Marketing, Analytics, and Product Personalization.
Fidelity's privacy policy states it collects public and non-public personal information from customers and visitors from a variety of sources, including applications/forms, stated preferences, and automatically collected technical/location/internet-usage information from digital interactions.
Fidelity's own corporate site states the company has been privately held since its 1946 founding by Edward Johnson 2d, who founded Fidelity Management & Research as sole adviser to the Fidelity Fund; the business operates today under the FMR LLC name shown in site-wide copyright notices.
Fidelity's GLBA consumer privacy notice discloses sharing for everyday business purposes and its own marketing with no customer opt-out available for either, while stating it does not share for joint marketing with other financial companies, affiliates' creditworthiness purposes, or with nonaffiliates so they can market to the customer.
Fidelity's privacy policy states it does not sell personal information for payment or other compensation, but acknowledges that some of the ways it shares personal information with third parties on its websites/apps may, under the CCPA, be legally considered a 'sale' or 'sharing' for cross-context behavioral advertising, for which it provides an opt-out link.
TechCrunch, citing Fidelity's own filing with Maine's attorney general, reported that an unnamed third party accessed Fidelity systems between August 17-19, 2024 using two recently created customer accounts, compromising personal information (including Social Security numbers and driver's licenses) belonging to over 77,000 customers; Fidelity terminated the access immediately upon detection and stated no customer accounts themselves were accessed.
The Fidelity Investments App Store privacy label discloses a 'Data Used to Track You' category, confirming that Purchases, Search History, Identifiers, and Usage Data may be used to track the user across apps and websites owned by other companies.
Fidelity's privacy policy states that Fidelity and third-party service providers it hires, 'such as Google, Meta and Microsoft,' may use cookies and other technologies including device IDs in online advertising on Fidelity's digital offerings.