Allstate
Financials
63
out of 100. Number 89 of 512, counting from the worst.
Where Allstate does well
- Renewals 4 of 20. Few problems found.
- Allstate honors the Global Privacy Control signal and offers an 'about ads / do not sell or share my personal information' opt-out in the site footer to ALL visitors, not just California residents.
- It explicitly promises not to discriminate against anyone who exercises privacy rights (access, deletion, correction).
- Insurance customers can request to see and correct their recorded personal information at any time via email or mail — a right stated up front.
- There is no forced binding-arbitration clause for site users — only a class-action waiver — which is milder than peers who mandate private arbitration.
- Policy renewal is not silent: the property policy states 'If we intend to renew your policy, we will mail you an offer to renew your policy at least 45 days before the end of the policy period,' and you can cancel by notifying them of a future stop date.
Just using Allstate's website means you give up the right to join a class action lawsuit against them — even a private-attorney-general or mass action.
The fine print
10 clauses and findings from the draft archive, dated 1 October 2026. The plain English comes first; the small print is the company's own words. None of these has been checked yet.
-
Just using Allstate's website means you give up the right to join a class action lawsuit against them — even a private-attorney-general or mass action. Your disputes must be brought alone, as an individual.
TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, BOTH YOU AND ALLSTATE AGREE THAT ANY DISPUTE, CLAIM, OR CONTROVERSY ARISING OUT OF OR RELATING TO THE SITE OR THESE TERMS WILL BE BROUGHT SOLELY IN AN INDIVIDUAL CAPACITY AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS ACTION, COLLECTIVE ACTION, REPRESENTATIVE ACTION, MASS ACTION, PRIVATE ATTORNEY GENERAL ACTION OR ACTION ON BEHALF OF THE GENERAL PUBLIC, OR SIMILAR PROCEEDING. ... YOU UNDERSTAND AND AGREE THAT BY ACCEPTING THESE TERMS, YOU ARE WAIVING THE RIGHT TO PARTICIPATE IN A CLASS OR REPRESENTATIVE ACTION.
-
The headline claim 'we do not sell your personal information' is immediately carved out: Allstate does share your data with ad companies for targeted advertising — which California law treats as a sale — and only offers an opt-out afterward.
We do not sell your personal information except for the sharing of personal information for cross-context behavioral advertising as defined under California law as explained below.
-
Ad networks (Adobe, Google, Microsoft) are allowed to follow what you do on Allstate's site and merge it with what they know about you from other unrelated websites, to serve you targeted ads.
With some of our Sites, we provide information about your online activities to third-party advertising companies or allow those advertising companies to collect the information using cookies and similar technologies, and allow the advertising companies to combine that information with information they collect on other unrelated sites to provide you with relevant, targeted advertising. ... Our service providers and third-party marketing and advertising partners include Adobe, Google and Microsoft.
-
Allstate shares your personal info with its affiliates (SquareTrade, Arity, National General, etc.) for marketing by default. There is no online switch to stop it — you must call a phone number, and they say it can take a month to kick in.
To request that we not allow other Allstate affiliates use your personal information to market their products and services, please call us at 1-800-856-2518 twenty-four hours a day, seven days a week. Please keep in mind that it may take up to four weeks to process your request.
-
Your personal data — including driving records, claims, geolocation, and sensitive info — can be fed into AI systems, including to build brand-new products. There is no opt-out offered for this use.
We may use your personal information with AI technology to improve or provide you with our services, to develop and provide you with new products, features, and technologies, to prevent fraud or misuse of our services, and for any other uses consistent with this privacy statement.
-
One app feature asks for full access to your personal email inbox — not just metadata, but the bodies and attachments of your emails — with read, write, and modify permission.
If you enroll in the Allstate Digital Footprint℠ feature through the mobile app, you provide Allstate access to your Microsoft and/or Google, and/or other available provider email accounts. We will only use the data accessed from your Microsoft, Google, and other available provider accounts to read, write, modify, or control email message bodies (including attachments), metadata, headers, and settings.
-
Allstate's sites can record your keystrokes, mouse movements, and clicks (session replay) and track your location while you browse — all combinable with your offline policy and claims data.
The information collected in this manner includes: ... recordings of mouse clicks, mouse movements, keystrokes, and other communications you make on our Sites ... your location when you access our Sites.
-
No fixed time limit is given for how long Allstate keeps your data — 'as long as necessary' for their 'business purposes' can mean years, and Drivewise/telematics data can live on for claims and litigation.
We retain personal information in accordance with applicable laws or regulatory requirements and also for as long as necessary to fulfill the purposes for which it was collected and to fulfill the business or commercial purposes that are explained in this Privacy Statement.
-
Allstate's data arm allegedly paid app developers to embed its tracking software in apps used by non-customers, harvested their movements, and monetized it into the 'world's largest driving behavior database' — the subject of active state litigation as of 2025–2026.
In January 2025 the Texas Attorney General sued Allstate and its data subsidiary Arity, alleging they unlawfully collected, used, and sold the location and movement data of more than 45 million Americans — via Arity tracking software embedded in third-party apps like Life360, GasBuddy, Fuel Rewards, and Routely — and used it to justify raising insurance premiums, without notice or consent.
-
Drivewise telematics data — your speed, braking, location — isn't just for your discount. If you're in a crash, lawyers and investigators on either side can get it and use it against you in court.
Data from the device may be deemed discoverable by third parties and used in an accident investigation and/or litigation.
Allstate Drivewise Terms of Use (as quoted by third-party review; not fetched from official page)
How these were found
Privacy Statement read via the content-delivery mirror (delivery.contenthub.allstate.com) because www.allstate.com/privacy-center/aic-privacy-statement returned a 'site update in progress' maintenance page on 2026-10-01; mirror is dated effective 06/23/2026 and is Allstate's own hosting. The Drivewise 'discoverable' clause is quoted from a third-party review site (usinsuranceagents.com) — it is a widely repeated verbatim quote of Drivewise's terms but I could not fetch the official Drivewise terms page directly. The Texas AG/Arity lawsuit finding is from news reporting, not an Allstate document. Policy renewal/cancellation language came from Allstate policy documents hosted on the same official content hub (delivery.contenthub.allstate.com). I could not read My Account or in-app (Drivewise) terms behind login, so app-specific consent screens were not reviewed.
These notes come from the original draft and are not independent verification.