webtracking.org
D 48/100

Twilio Segment

A CDP whose job is to collect identity-resolved data and fan it out to many destinations, including ad platforms. Privacy is entirely a function of configuration and consent enforcement.

verified 2026-06-08 · grade set per the published methodology

How the grade breaks down

Data minimization 2/5

How little it collects, and whether collection is purpose-bound.

Consent honoring 3/5

Whether it respects GPC, consent state, and tracking-prevention signals.

Identifier strategy 2/5

Cookieless vs. persistent IDs, cross-site linkage, fingerprinting risk.

Residency & sharing 2/5

Where data lives and whether it is shared with third parties.

Transparency 3/5

How verifiable and documented its real behavior is.

At a glance

Category cdp
Cookieless optional
Consent for lawful use required
Data residency us
Shares w/ third parties yes
Sends PII by default yes
Honors GPC no
Open source no

Segment collects identity-resolved customer data and routes it to a large catalog of destinations, frequently including advertising and marketing platforms. By design it sends personal data onward, so the privacy outcome depends completely on which destinations are enabled and whether consent is enforced upstream. It provides consent-enforcement and privacy (PII-blocking) features, but the default posture of a CDP is data-maximizing, not minimizing.

Sources & basis for grade

Grades reflect documented behavior, vendor documentation, and ad.rip scans as of the date above. Each assessment is reproducible and vendors may request correction.

  • Segment privacy / consent-enforcement documentation
  • Segment destinations catalog
  • Segment sub-processor list