30
Grade D

IdentityGuard Privacy Policy

Owned by Aura | IBM Watson AI | Last reviewed: January 2026

Privacy Summary

IdentityGuard markets its IBM Watson AI-powered monitoring as a premium feature, but this AI processing raises significant privacy questions. Your sensitive identity data is analyzed by machine learning systems, and the policy is unclear about data retention for AI training. Additionally, Aura's acquisition means your data may flow between both services.

Data Collection Overview

Data Type Collected Shared Sold
Social Security Number Yes Credit Bureaus, IBM Watson No
Financial Account Info Yes Monitoring, AI Analysis No
Credit Report Data Yes Aura, AI Processing No
Dark Web Scan Results Yes Internal Systems No
Device Information Yes Analytics, Aura Unclear

Key Privacy Concerns

IBM Watson AI Data Processing

Your identity data is processed by IBM Watson's AI systems for threat detection. The policy doesn't clearly explain what data IBM retains, whether it's used for AI training, or how long IBM stores your information.

Aura Cross-Platform Data Sharing

Since Aura acquired IdentityGuard, data sharing between the two services is permitted. If you use Aura's other services, your identity data may be combined with VPN, antivirus, and password data for a comprehensive profile.

Third-Party AI Partners

Beyond IBM, IdentityGuard may share data with other AI and analytics partners for "improving services." The specific partners and their data practices are not disclosed in the privacy policy.

Tiered Data Collection

Different subscription tiers collect different amounts of data. Higher tiers with more monitoring features require more personal information, but the policy applies the same broad sharing permissions regardless of tier.

AI Processing Concerns

The use of AI for identity monitoring raises specific privacy questions:

  • AI models may retain patterns learned from your data
  • Unclear if your data contributes to model training
  • AI decisions about "threats" lack transparency
  • IBM Watson processes data under its own privacy policy
  • No clear explanation of AI data retention policies

Data Deletion Limitations

IdentityGuard's data deletion process has notable gaps:

  • AI/ML derived insights may not be deletable
  • Data shared with IBM subject to IBM's retention
  • Aura cross-platform data requires separate deletion requests
  • Credit bureau data outside IdentityGuard's control

Comparison Note

IdentityGuard scores 30 on privacy - below average for an already low-scoring category. The combination of AI processing, Aura ownership, and vague third-party sharing creates significant privacy risks beyond standard identity protection services.

Read our IdentityGuard Terms of Service Review →