Information is used for security, fraud prevention and safety
Instacart uses your Personal Information to maintain the security and integrity of the Services; to detect, prevent, investigate and protect you, its business, users and others from fraud, unauthorized transactions and other unsafe activity; and to protect the safety, rights or property of any person, the public or Instacart.
Supporting quotations
We use your Personal Information to (a) help maintain the security and integrity of the Services, (b) detect, prevent, investigate, and protect you, our business, our users, and others from fraud, unauthorized transactions, and other unsafe activity, and (c) protect the safety, rights, or property of any person, the public, or Instacart.
Security & Safeguards · Company practice
Device, activity and order history go to fraud prevention providers
To protect customers and prevent fraudulent purchases, Instacart discloses your Personal Information, such as device and activity information and order history, to third-party fraud prevention providers so they can check whether a purchase is legitimate.
Supporting quotations
To help protect our customers and prevent fraudulent purchases, we disclose your Personal Information (such as your device and activity information and order history) to our third-party fraud prevention providers so they can check whether the purchase is legitimate.
Security & Safeguards · Company commitment
Instacart commits to protect health information as applicable law, including HIPAA, requires
To the extent Instacart receives, creates, maintains, uses or discloses your Personal Health Information, it says it will maintain the privacy and security of that information as required by applicable law, including HIPAA and its regulations.
Supporting quotations
To the extent that we receive, create, maintain, use, or disclose any of your Personal Health Information, we will maintain the privacy and security of such information as required by applicable law, including the Health Insurance Portability and Accountability Act and the regulations promulgated under that Act (“HIPAA”).
Qualifications & exceptions
The commitment is tied to what applicable law requires and applies to the extent Instacart handles Personal Health Information.
Not stated here
The policy does not say whether Instacart is itself a HIPAA-covered entity or business associate.
Security & Safeguards · Company commitment
Instacart maintains reasonable measures to protect information, including health information
Instacart says it employs and maintains reasonable administrative, physical and technical measures designed to protect Personal Information under its control from unauthorized access, use and disclosure. For Personal Health Information, it says it uses systems and processes consistent with federal and state privacy and security requirements, including HIPAA.
Supporting quotations
10. Information Security
We employ and maintain reasonable administrative, physical, and technical measures designed to safeguard and protect Personal Information under our control from unauthorized access, use, and disclosure.
In addition, when we collect, maintain, access, use, or disclose your Personal Health Information, we do so using systems and processes consistent with information privacy and security requirements under applicable federal and state laws, including, without limitation, HIPAA.
Qualifications & exceptions
The commitment is to reasonable measures "designed to" protect information, not to prevent every incident.
Not stated here
No specific security measures, certifications or breach-notice commitments are described.
Security & Safeguards · Restriction or exception
Instacart does not guarantee the security of your information
Because no data transmission or storage system is completely secure, Instacart says it cannot guarantee the security of your information.
Supporting quotations
Nevertheless, because no data transmission or storage system is completely secure, we cannot guarantee the security of your information.
Qualifications & exceptions
The disclaimer sits after the health-information security sentence and is worded about your information generally.
Transfers follow applicable law, but foreign authorities may be able to access the data
When Instacart transfers Personal Information outside your country or province of residence, it says it does so in accordance with applicable law and takes appropriate steps to ensure the information is protected. It warns that outside the jurisdiction where you live, some of your information will be subject to local laws that may permit government and national security authorities there to access it in certain circumstances.
Supporting quotations
When we transfer your Personal Information outside of your country or province of residence, we do so in accordance with applicable law and take appropriate steps to ensure your information is protected.
some of your Personal Information will be subject to applicable local laws, which may permit government and national security authorities in those jurisdictions to access your Personal Information in certain circumstances.
Qualifications & exceptions
The protection commitment is to "appropriate steps", which are not specified.
The warning about authority access is limited to circumstances allowed by local laws.
Not stated here
The steps taken to protect transferred information are not described.