This cybersecurity news graveyard memorializes deleted Big Tech privacy clauses — the protections vendors quietly removed. Seven exhibits, each with what the clause said and when it died.
Deleted clauses tell the story vendors don't advertise: the Meta AI-training sentence that vanished, retention caps that quietly lengthened, promises that narrowed. Each graveyard exhibit preserves the original wording and the date it disappeared, so the rollback stays on the record.
Every clause below is real, quoted briefly, dated, and sourced. Some died by backlash. Some were quietly buried in a "policy update." Two were killed by a court order. None of them will be missed — which is exactly the problem. When a clause dies, check who benefits.
When it died: October 17, 2026. Meta cut the sentence from its Commercial Terms (effective October 30, 2026) after publishers and legal scholars — including Nieman Lab and Cornell professor James Grimmelmann — warned the wording read as a blank check to scrape news sites for AI training, possibly overriding robots.txt. The Verge reported the removal the same day.
What replaced it: narrowed crawling language limited to advertising and business products — the word "train" is gone. Meta's spokesperson said the change doesn't alter how its web crawlers actually operate and that robots.txt still signals owner preferences. The clause died; the crawlers didn't.
When it died: spotted ~May 2026. The on-device AI toggle in Chrome's Settings UI used to carry that exact sentence — a privacy representation users could rely on when deciding whether to leave the default toggle in place. In the current Settings, the assurance is gone, and the toggle was moved out of the System block into its own section, visually decoupling it from surrounding device controls.
What replaced it: the same toggle, with the same default, minus the sentence promising your data stays local. No announcement — just a quieter UI.
When it died: September 2024. LinkedIn updated its privacy policy to use member data — posts, comments, articles, profile information, work history — to train generative AI models, without explicit consent. Users discovered the opt-out buried in Settings → Data Privacy, sparking backlash covered by 404 Media and The Verge.
What replaced it: default-on AI training with a manual opt-out that is explicitly not retroactive — anything posted before you found the toggle is already embedded and stays in the model. Training on you was opt-out; it never asked.
When it died: October 18, 2024. In the same update, X added a "Third-party collaborators" paragraph to its Privacy Policy: "If you do not opt out, in some instances the recipients of the information may use it for their own independent purposes... including, for example, to train their artificial intelligence models, whether generative or otherwise." At the time, X had not specified where users could even toggle the opt-out.
What replaced it: indefinite retention, third-party AI licensing as a potential revenue stream, and — in the same Terms update — a clause fining anyone viewing more than a million posts a day $15,000 in "liquidated damages."
When it died: June 2023. The FTC's complaint alleged the genetic testing company retroactively and surreptitiously changed its privacy policy — broadening the third parties with whom consumer genetic information could be shared and expanding the purposes of disclosure — without notifying consumers or obtaining consent, even though those consumers had provided DNA under the previous, materially more restrictive policy.
What replaced it: a settlement: $75,000 fine, destruction of retained DNA samples, and a ban on sharing collected health data with third parties. The lesson the FTC keeps repeating: material changes need clear, conspicuous notice and cannot be applied retroactively.
When it died: August 27, 2026. The New Jersey Superior Court entered a final default judgment against Radaris.com, Rehold.com, and Trustoria.com in Atlas Data Privacy Corporation, et al. v. Radaris.com, et al., finding violations of New Jersey's Daniel's Law (protecting home addresses and unpublished phone numbers of law enforcement, judges, and other covered persons) and awarding seizure of the radaris.com domain to Atlas Data Privacy Corporation. The site now serves a court notice.
What replaced it: a seizure notice and permanent injunctions restraining disclosure of covered persons' protected information. One of the most stubborn opt-out flows in the industry — solved by seizing the domain.
When it died: 2026. Atlas Data Privacy Corporation sued PeekYou LLC in New Jersey Superior Court on April 30, 2025, asserting Daniel's Law claims on behalf of ~21,700 law enforcement officers, prosecutors, and other covered persons. Atlas and PeekYou entered a settlement agreement; the domain is now controlled by Atlas Data Privacy Corporation.
What replaced it: a domain notice explaining the settlement and pointing to the Superior Court of New Jersey. Same playbook as Radaris: Daniel's Law enforcement, broker by broker.
TermsWatch watches vendor terms and privacy policies so you catch the next deletion the day it happens — not the day after your data is gone. And the Security Suite bundles every Ingenious AI platform in one early-access package.
Our platforms are being upgraded and return November 1 — get early access now:
Get TermsWatch early access →Yes. On October 17, 2026, Meta removed a sentence from its Commercial Terms (effective October 30, 2026) that had allowed it to use content from business-linked domains to "provide, develop, improve, research, train, and maintain" its products. The removal followed publisher and legal backlash — Nieman Lab had legal experts read the original clause — and The Verge reported it the same day.
For material changes, no — and the FTC enforces this. In June 2023 the FTC took action against genetic testing company 1Health.io (formerly Vitagene) for retroactively changing its privacy policy to broaden genetic-data sharing without notice or consent. The settlement: a $75,000 fine and destruction of retained DNA samples.
No. Opt-outs are not retroactive. LinkedIn's terms are explicit that opting out of "Data for Generative AI Improvement" only stops future collection — anything gathered before the toggle stays in the training datasets. Once your data is in a model, you can't untrain it.
Both lost their domains to Atlas Data Privacy Corporation under New Jersey's Daniel's Law. Radaris.com was seized by a Superior Court order on August 27, 2026 after a default judgment; PeekYou's domain was taken over following a settled lawsuit filed April 30, 2025. Both domains now serve official transfer notices.
TermsWatch diffs vendor terms and privacy policies so you catch deletions and weakenings the day they land — including the quiet ones buried in a settings redesign. Get early access above; our platforms return November 1.
Yes — on October 17, 2026, Meta removed the sentence allowing it to use business-linked content to "train" its products, after publisher and legal backlash. The revised terms (effective Oct 30, 2026) cover only ads and business products.
Material changes require clear notice and cannot be applied retroactively — the FTC fined genetic tester 1Health.io $75,000 in June 2023 for doing exactly that.
TermsWatch diffs vendor terms and privacy policies so deletions and quiet weakenings surface the day they land — get early access above.
Yes. On October 17, 2026, Meta removed a sentence from its Commercial Terms that had allowed it to use content from business-linked domains to "provide, develop, improve, research, train, and maintain" its products. The change followed publisher and legal backlash; The Verge reported the removal that day.
Not legally for material changes. The FTC has brought enforcement actions against companies that retroactively changed privacy policies without notice — genetic testing company 1Health.io paid a $75,000 settlement in June 2023 after broadening data sharing under a revised policy.
No. Opt-outs are not retroactive. LinkedIn's terms are explicit that data collected before the opt-out remains in training datasets; flipping the "Data for Generative AI Improvement" toggle only stops future collection.
Both lost their domains to Atlas Data Privacy Corporation under New Jersey's Daniel's Law. Radaris.com was transferred by court order on August 27, 2026; PeekYou's domain was taken over after a settled lawsuit filed April 30, 2025.
Yes. On October 17, 2026, Meta removed a sentence from its Commercial Terms (effective October 30, 2026) that had allowed it to use content from business-linked domains to "provide, develop, improve, research, train, and maintain" its products. The removal followed publisher and legal backlash, and The Verge reported it the same day.
For material changes, no — and the FTC enforces this. In June 2023 the FTC took action against genetic testing company 1Health.io (formerly Vitagene) for retroactively changing its privacy policy to broaden genetic-data sharing without notice or consent. The settlement: a $75,000 fine and destruction of retained DNA samples.
No. Opt-outs are not retroactive. LinkedIn's terms are explicit that opting out of "Data for Generative AI Improvement" only stops future collection — anything gathered before the toggle stays in the training datasets.
Both lost their domains to Atlas Data Privacy Corporation under New Jersey's Daniel's Law. Radaris.com was seized by a Superior Court order on August 27, 2026 after a default judgment; PeekYou's domain was taken over following a settled lawsuit filed April 30, 2025. Both domains now serve official transfer notices.
TermsWatch diffs vendor terms and privacy policies so you catch deletions and weakenings the day they land — including the quiet ones buried in a settings redesign.