22
Grade F

Identity Force Privacy Policy

TransUnion Company | Last reviewed: January 2026

Credit Bureau Ownership: Identity Force is owned by TransUnion, one of the three major credit bureaus. Your "protection" data becomes part of TransUnion's massive consumer data ecosystem and is subject to credit bureau data practices.

Privacy Summary

Identity Force's privacy policy is essentially TransUnion's privacy policy. This means the data you provide for identity "protection" joins TransUnion's existing credit data about you and can be shared across their entire partner network. Credit bureaus have some of the most permissive data sharing practices allowed under law.

Data Collection Overview

Data Type Collected Shared Sold
Social Security Number Yes TransUnion Network Yes (FCRA permitted)
Financial Information Yes TransUnion Partners Yes (FCRA permitted)
Credit Report Data Yes Lenders, Employers, etc. Yes (core business)
Identity Verification Data Yes TransUnion Products Yes (verification services)
Alert Preferences Yes Marketing, Affiliates No

Key Privacy Concerns

Credit Bureau Data Ecosystem

TransUnion's business is selling data. Your Identity Force subscription data joins their consumer file, which is shared with thousands of creditors, employers, landlords, and other "permissible purposes" under the FCRA. You're paying to add more data to their saleable profile of you.

FCRA Permissive Sharing

The Fair Credit Reporting Act allows credit bureaus to share your data without consent for "permissible purposes" including credit decisions, employment screening, insurance underwriting, and government benefits. Identity Force data becomes subject to these rules.

TransUnion Product Cross-Selling

Your Identity Force data and activity can be used to market other TransUnion products and services. TransUnion offers numerous B2B products using consumer data - your protection service feeds this ecosystem.

Verification Services Revenue

TransUnion sells identity verification services to businesses. The identity data you provide for "protection" can be used to verify your identity when businesses query TransUnion - effectively monetizing your protection data.

Credit Bureau Reality

Understanding the credit bureau model is essential:

  • Credit bureaus exist to collect and sell consumer data
  • You are not the customer - businesses buying data are
  • FCRA provides legal cover for extensive data sharing
  • Opting out of marketing doesn't stop "permissible purpose" sharing
  • Your consumer file persists indefinitely

Data Deletion: Nearly Impossible

Unlike standalone identity protection services, data deletion from TransUnion/Identity Force is extremely limited:

  • Credit report data subject to FCRA retention (7-10 years)
  • Identity verification data retained for "business purposes"
  • CCPA deletion requests don't override FCRA
  • Data may persist in TransUnion archives indefinitely
  • Partner copies outside TransUnion's control

Comparison Note

Identity Force scores a failing 22 on privacy - the worst in the category. The fundamental conflict of a credit bureau offering "identity protection" means your protection data simply becomes more data for TransUnion to monetize.

Read our Identity Force Terms of Service Review →