The Data Trail: How Everyday Payments Quietly Shape Who Is Safe - and Who Is Not
Every payment leaves a data trail. Here's what that means for you.
The apps we use to split dinner bills are now showing up in courtrooms.
Venmo transactions helped expose financial ties in a Supreme Court ethics scandal. Payment histories are being subpoenaed in divorce proceedings to reconstruct who you saw, where you went, and how often. And in states where reproductive healthcare has been criminalized since the Supreme Court’s Dobbs decision overturned Roe v. Wade, a payment to a clinic is evidence—sitting on a server, waiting to be subpoenaed.
Here’s the thing no one tells you when you tap “pay”: you’re not just moving money. You’re creating a record. One that ties together your relationships, movements, health decisions and vulnerabilities. That record can be stored, linked, searched, and in many cases, sold.
Do you want your employer to know you have erectile dysfunction? Do you want a data broker to know you’re in therapy? Should your ex-husband’s lawyer be able to reconstruct every dollar you spent in the six months before you left? Does a prosecutor in Texas have the right to know you bought a pregnancy test and then sent $400 to a friend in Colorado?
Right now, payment platforms make all of this not just possible, but easy.
We’ve seen this from two sides of the same problem. One of us spent decades in reproductive health strategy, where a single exposed transaction can put someone at risk. The other has built financial systems for vulnerable populations, where the infrastructure itself determines who can operate safely. The pattern is the same: tools designed for convenience have become tools of exposure. And they were never designed to protect you.
Why This Is Worse Than You Think
You’ve probably heard the warnings about period-tracking apps. After Dobbs, the headlines were everywhere: your cycle data could be used against you. That was a real concern. But here’s what those stories missed:
Period trackers record what your body might be doing. Payment records prove what you did.
Here’s the difference. A period tracker shows an irregular cycle. That’s ambiguous—it could mean anything. But a payment record showing a transaction with a women’s health clinic in another state, followed by a pharmacy purchase the next day? That’s a narrative. And it’s one that prosecutors, insurers, employers, and abusive partners can all read.
A single transaction can reveal where you went, who you paid, when, and how much. And unlike an app you can delete, payment data lives on servers you don’t control, governed by privacy policies you’ve never read, shared with partners you’ve never heard of.
We reviewed the privacy policies of nine major payment platforms. (See our full analysis—covering Venmo, Cash App, Apple Pay, Google Pay, Zelle, PayPal, Stripe, Affirm, and Klarna—at privacyprotector.org.) What we found was consistent and troubling: every platform collects data beyond what’s required to move your money. Most retain it longer than you’d expect. And the sharing is far broader than most people realize.
One example that should alarm you: Stripe processes payments for millions of businesses, including healthcare providers and telehealth platforms. We read their full privacy policy—all 23 pages. Stripe collects data from transactions you never even complete. You start to pay a clinic, enter your card number, change your mind and close the browser— the information is already captured. Their policy also allows data sharing with advertising partners, which “may be considered a data ‘sale’” under California law. And that data is used to train their AI models. All of this is disclosed in the fine print. None of it is visible at checkout.
What Happens When the Rules Change
Yes, payment surveillance has legitimate uses—tracking money laundering, exposing fraud. But the vast majority of people making everyday transactions are not criminals, and they do not deserve to have every purchase logged, profiled, and sold.
And here’s what makes this urgent: infrastructure built for one purpose gets used for another when conditions change. We’ve already seen it. In China, mobile payment platforms collect extensive behavioral data through everyday transactions. That infrastructure has become intertwined with state surveillance—not because it was designed for that purpose, but because it was available when the political environment shifted. The systems were already in place. They only needed to be pointed in a new direction.
If you think that can’t happen here, consider that it already is—one subpoena, one data broker sale, one policy change at a time.
The Cost of Being Watched
When people know they’re being recorded, they change. They hesitate. They self-censor. They avoid. A woman skips the clinic and is forced to pay cash at a pharmacy two towns away. A domestic violence survivor stops using Venmo because her ex can see who she’s paying.
Over time, this isn’t just an inconvenience. It reshapes what feels possible. It’s a tax on freedom that falls hardest on the people who can least afford it.
The purpose of a payment should be to move money—not to create a permanent, queryable record of human behavior. But that boundary doesn’t exist in today’s payment systems. The platforms that collect this data have no incentive to stop. The system will not fix itself.
That’s why we built Privacy Protector. We’re starting by making the infrastructure more visible—platform by platform, policy by policy—so you can see where your data goes, understand what it means, and make informed decisions about your own exposure.
But visibility is only the first step. The deeper question isn’t just how to navigate a broken system—it’s whether we can build a better one. Payment infrastructure that actually does what it claims to do: move money. Nothing more. The technology to build privacy-preserving payment systems already exists. What’s missing is the will, the demand, and the evidence base to make the case. We’re building that case.
Soon we’ll be publishing deeper dives into the individual platforms and their policies, breaking down what they actually collect, who they share it with, and practical steps you can take right now to better protect yourself. We’ll also be highlighting the work of other great privacy organizations and offering policy changes that could provide protections that don’t yet exist.
Because you can’t protect yourself from a system you can’t see. And you can’t change one you don’t understand.
→ Explore our full platform-by-platform analysis at privacyprotector.org