OnePlus US

OnePlus is a Chinese consumer electronics manufacturer known for their smartphone lineup.

3/10

How we calculate ratings →

Handling

Does the policy allow personally-targeted or behavioral marketing? Yes, but you may opt-out

4/10

Does the service allow you to permanently delete your personal data? No

0/5

Does the service allow third-party access to private personal data? Yes

0/10

This may come in the form of outright data sharing or by using local third-party analytics software (such as Google Analytics, which collects a plethora of user information).

Note that whether the policy allows sharing aggregated user data does not affect this question.

If the personal data is encrypted when it passes through the third-party, it does not count as third-party access (as the data is inaccessible to that party).

If personal data has been made public by, for example, posting it to a blog, it does not count as private personal information (and is therefore not considered by this question).

Score

Yes

The policy allows sharing personal data with third parties (not just critical service providers), and does not explicitly list the third parties.

Yes, all parties specified (including non-critical service providers such as advertisers)

30%

Yes, not all parties specified (but only to critical service providers)

70%

Yes, all parties specified (only to critical service providers)

80%

100%

Citation

5.1 We will disclose your personal information between affiliates or subsidiaries [...]

5.2 OnePlus will disclose your personal information to its service providers under certain circumstances. [...]

5.3 In addition, OnePlus shall disclose your information to public authorities with jurisdiction over the territories in which we operate

5.4 In any case of sharing your personal information with third parties, we endeavor to disclose it to such third parties only to the extent permitted by law [...]

Notes

Did not mention any sharing for non-critical service.

But in "5.2 OnePlus will disclose your personal information to its service providers", it only mentions one example (purchase OnePlus phone), but not all the possible sharings.

Therefore, it is not sure whether it includes "non-critical service providers"

When does the policy allow law enforcement access to personal data? Always

0/5

Score

Always

This includes cases in which law enforcement either runs the service or has a known backdoor into (or relationship with) the service.

Not specified

When reasonably requested

60%

Only when required by a court order or subpoena

80%

N/A (no personal data to share)

The service would have no personal data to share with law enforcement.

100%

Never (special legal jurisdiction)

The service operates in a jurisdiction in which sharing data with law enforcement is never required.

100%

Citation

5.3 In addition, OnePlus shall disclose your information to public authorities with jurisdiction over the territories in which we operate to provide personal information of our users in compliance with the law or in the performance of legal procedure.

Notes

There is no mention of what is the requirement for such disclosure.

Transparency

Does the policy outline the service's general security practices? Somewhat

1/3

Score

Somewhat

The policy provides only a very vague overview of its security practices.

30%

Yes

60%

Yes, including audits

"Reviews," "monitoring," etc. also count as audits.

80%

Yes, including independent audits

Independent "reviews," "monitoring," etc. also count as independent audits.

100%

N/A

The service doesn't collect any personal information.

100%

Citation

7.1 OnePlus only retains your personal information for the time period necessary for the purposes described in this Privacy Policy and as required by applicable laws and regulations.

7.2 OnePlus uses various management policies (such as establishing information security system; signing a confidentiality agreements with information management employees; allowing only work-related employees to access the information collected; and other similar policies) and security techniques and procedures (such as entering passwords before access, access control isolation, monitoring for computer use, etc.) to prevent the loss of information, improper use, and unauthorized reading or disclosure. For example, in some services, OnePlus uses encryption technology (such as TLS) to protect the personal information you provide.

Is the policy's history made available? Only the date it was last modified

3/5

Does the policy require users to be notified in case of a data breach? Yes, eventually

5/7

Will affected users be notified when the policy is meaningfully changed? Yes

5/5

Collection

Does the service collect personal data from third parties? Yes

0/10

Is it clear why the service collects the personal data that it does? Somewhat

3/10

Score

Somewhat

30%

Mostly

70%

Yes

100%

N/A

The service doesn't collect any personal information.

100%

Citation

2.1 When you register for an account and purchase a OnePlus product, you shall provide relevant personal information, [...]

3.1 Used for authentication, security, fraud monitoring, archiving and backup purposes to ensure the security of products and services provided to you by OnePlus.

3.2 Provide you with services

3.3 Contact you directly.

3.4 Help OnePlus to improve products and services.

3.5 OnePlus may know about the regional distribution of OnePlus products.

3.6 With your consent, OnePlus may send you our latest product and service information,
2.2 Where permitted by law, OnePlus shall also obtain data about you from third-party sources. [...]

2.3 When you activate and use a OnePlus product, we shall also collect information about your device or software [...]

2.4 Network information [...]

2.5 Location information [...]

[...]

Notes

in the "2. Personal Information collected by OnePlus" section and "3. How OnePlus will use your Personal information" section

Only a very general category is provided with several examples

Does the service allow the user to control whether personal data is collected or used for non-critical purposes? No

0/10

Some services allow users to opt-out or opt-in to of non-critical collection or use of personal data, such as collecting data for personalized advertisements.

Score

On an opt-out basis, but only for some non-critical data/uses

30%

On an opt-out basis, for all non-critical data/uses

60%

On an opt-in basis

60%

N/A (no data used for non-critical purposes)

100%

Citation

3.4 Help OnePlus to improve products and services. For example, OnePlus will analyze and study the collected data to make user-friendly adjustments to its operating system and interface design in accordance with user characteristics. [...]

Notes

Did not mention whether you need to opt-out for purpose of "make user-friendly adjustments to its operating system and interface design in accordance with user characteristics".

In reality these usage analytics cannot be opt-out: "OxygenOS securely transmit analytics in two different streams, usage analytics and device information. [...] If you opt out of the user experience program, your usage analytics will not be tied to your device information." (but this information does not mention how to turn off usage analytics) from https://forums.oneplus.com/threads/lets-talk-about-oxygenos-analytics.654820/

Does the policy list the personal data it collects? Yes, generally

7/10

Score

The policy does not claim to not collect personal data, but it also doesn't provide any meaningful insight into the types of personal data it collects.

Only summarily

The policy uses overly vague language to provide a summary of the types of collected personal data.

30%

Yes, generally

All general categories of collected personal data are listed, though not all types of personal data are explicitly mentioned (for example, the list might use a phrase like 'such as' when listing types of personal data).

70%

Yes, exhaustively

All types of collected personal data are listed specifically

100%

N/A (no personal data is collected)

100%

Citation

2.1 When you register for an account and purchase a OnePlus product, you shall provide relevant personal information, [...]

2.2 Where permitted by law, OnePlus shall also obtain data about you from third-party sources. [...]

2.3 When you activate and use a OnePlus product, we shall also collect information about your device or software [...]

2.4 Network information [...]

2.5 Location information [...]

[...]

Notes

Contain examples of these data in "2. Personal Information collected by OnePlus"

Last Updated

May 26, 2021

Sources

Source #1 ↗

Contributors

Anonymous