Mint Mobile, LLC is a direct-to-consumer prepaid wireless brand operated under Ka'ena Corporation, which T-Mobile US Inc. (NASDAQ: TMUS) fully acquired on May 1, 2024, alongside sister brands Ultra Mobile and Plum; T-Mobile's FY2025 10-K lists Mint Mobile among its flagship consumer brands and websites. Mint's privacy notice (last updated July 30, 2026) describes conventional MVNO collection (registration data, IP address, ISP, approximate device location inherent to cellular service), states it will not sell, rent, trade, or license customers' specific personal or financial information but reserves the right to sell or share aggregated/deidentified data and self-declares under CCPA that it sells or shares browsing activity, geolocation, and behavioral inferences with third-party analytics, marketing, and advertising providers. It shares CPNI with affiliates and uses cookies, web beacons, and third-party session-replay tools. Mint has disclosed two customer data breaches to date: a June 2021 unauthorized phone-number porting/account-access incident and a December 2023 breach exposing names, phone numbers, emails, and SIM/IMEI identifiers usable for SIM-swap attacks.
TIMELINE
NO ENTRIES ON FILE YET.
ULTIMATE PARENT
TOOLS WE RECOMMEND
PLUS
RECEIPTS
8 ON FILE
[2026-07-30] · COLLECTION
Mint Mobile's Privacy Notice (last updated July 30, 2026) states that during registration customers are prompted to provide name, billing address(es), phone number, port-in phone number, email address, and debit/credit card number, that the website automatically logs IP address, Internet service provider, and timestamps, and that 'all wireless communication systems know when your phone is turned on and approximately where the device is physically located.'
T-Mobile US Inc.'s newsroom article, published May 1, 2024, announces the completion of T-Mobile's acquisition of Ka'ena Corporation, the parent of prepaid brands Mint Mobile and Ultra Mobile and wholesale provider Plum, confirming Mint Mobile's ultimate corporate parent as T-Mobile US Inc. (NASDAQ: TMUS).
T-Mobile US Inc.'s Form 10-K for fiscal year 2025, filed with the SEC on 2026-02-11, states that T-Mobile provides services, devices, and accessories across its 'flagship brands, T-Mobile, Metro by T-Mobile and Mint Mobile,' and lists www.mintmobile.com among its operating websites, confirming Mint Mobile's status as a wholly disclosed T-Mobile US brand in mandatory SEC filings.
The Privacy Notice states Mint 'will not sell, rent, trade, license or otherwise disclose your specific personal information or financial information to third parties,' except that aggregated or deidentified information may be sold, shared, or licensed for any purpose, and that CPNI is shared with Mint's affiliates. Its CCPA disclosure table separately lists 'Internet activity information, like browsing history, interactions with our website and online advertisements' and geolocation/inference data as categories sold or shared with 'Third-party analytics, marketing and advertising providers.'
BleepingComputer reported on July 10, 2021 that Mint Mobile disclosed a data breach in which an unauthorized party ported 'a very small number of Mint Mobile subscribers' phone numbers to another carrier between June 8-10, 2021, and potentially accessed subscriber names, addresses, emails, passwords, call history, and account details, quoting Mint's own breach notification email to affected subscribers.
BleepingComputer reported on December 22, 2023 that Mint Mobile began notifying customers of a new breach in which 'an unauthorized actor obtained some limited types of customer information,' including names, phone numbers, email addresses, SIM serial numbers, IMEI numbers, and service plan descriptions -- data the outlet noted is sufficient to perform SIM-swap attacks -- while stating credit card numbers were not stored and were not exposed.
The same Privacy Notice describes use of persistent and session cookies, web beacons in webpages and emails to track opens and engagement, and third-party session-replay tools that record mouse movements, clicks, and scrolls; it states these online tracking technologies may constitute a 'sale' or 'sharing' (including targeted advertising) of personal information under California law, for which it provides an opt-out.