SBA Communications
Real Estate
31
out of 100. Number 386 of 512, counting from the worst.
Where SBA Communications does well
- Arbitration 0 of 20. Nothing found.
- Renewals 0 of 20. Nothing found.
- SBA explicitly promises 'We do not sell or share Sensitive Data.' It honors Global Privacy Control browser signals and provides a 'Your Privacy Choices' opt-out portal; its cookie management tool only sets optional analytic/third-party cookies if you enable them.
- Material privacy changes come with a prominent website notice or direct email before taking effect, and the policy states it will not discriminate against people who exercise privacy rights, offering appeal rights and non-retaliation.
- No forced-arbitration or class-action waiver appears in any public-facing document, and as an investor/carrier-facing site there are no auto-renewing consumer subscriptions.
SBA openly admits it 'sells or shares' your identifiers, contact and customer records, commercial data, browsing history, and even profiles inferred about you.
The fine print
6 clauses and findings from the draft archive, dated 1 October 2026. The plain English comes first; the small print is the company's own words. None of these has been checked yet.
-
SBA openly admits it 'sells or shares' your identifiers, contact and customer records, commercial data, browsing history, and even profiles inferred about you. The buyers are analytics and advertising providers and joint marketing partners, for targeted advertising.
Under applicable Privacy Laws, we may sell or share the following categories of personal data: Identifiers, Customer Records Data, Commercial Data, Internet Use Data, and Inferences. We do not sell or share Sensitive Data.
-
Even on a B2B tower-REIT site, ad-tech trackers can follow you across the web over time and merge what they see on SBA's site with what they see elsewhere to target ads at you.
We may participate in behavior-based advertising, where third parties may use cookies and similar technologies to collect information about your online activity across websites and over time. This information may be used to provide advertising about Services tailored to your interests on our Website, other websites, or through other channels. These third parties may combine information collected from our Website with information collected from other websites you visit.
-
SBA can rewrite its privacy rules whenever it wants on its own say-so. Small changes take effect the moment they're posted, and simply continuing to use the site counts as accepting them — you have to police the changes yourself.
SBA reserves the right to amend this Privacy Notice at any time in its sole discretion. If we do, we will update the 'Last Updated' date at the top of this Privacy Notice and make sure to notify you about any material changes either by displaying a prominent notice on top of the SBA Website and/or emailing you directly. Non-material changes will be effective immediately upon their inclusion in this Privacy Notice and the posting of the same on the Website.
-
Based on its own judgment, SBA can hand your personal information to private investigators and police — including if it merely believes you are 'interfering with our operations,' a broad standard with no warrant or notice required.
We may disclose your Personal Information on a case-by-case basis to attorneys, private investigation organizations, or law enforcement agencies if we reasonably believe that you are: (i) at risk of harm from another; (ii) harming or interfering (or will harm or interfere) with others or our operations; or (iii) violating (either intentionally or unintentionally) our Terms of Use ... or other legal obligations.
Privacy Policy (Sharing Personal Information — Questions of Harm)
-
Every link in SBA's marketing emails routes through its servers so it can track what you click. Its official advice for avoiding tracking is literally 'simply do not click text or graphic links in the email' — i.e., don't use the email. Separately, the site ignores Do Not Track browser signals entirely.
We may send emails that use a 'click-through URL' linked to content on our Website. When you click one of these URLs, you pass through our web server before arriving at a destination webpage. We track this click-through information to help determine interest in particular topics and measure the effectiveness of our communications. If you prefer not to be tracked, simply do not click text or graphic links in the email, or notify us as set forth in Section 6 below.
-
There is no fixed deletion timeline — data is kept 'as long as needed,' which the law can stretch further, and even after deletion some of your data can live on in SBA's logs and records.
We will retain your Personal Information for as long as your account is active, or for the length of time needed to fulfill the purposes outlined in this Privacy Notice, unless a longer retention period is required or permitted by law. After retention periods expire, we delete your Personal Information in accordance with our data retention schedule. Although there may be some latency in deleting this data from our servers and back-up storage, certain data may be retained in our logs and other records.
How these were found
Privacy Notice read directly from https://www.sbasite.com/privacy-policy/ (page marked 'Last Updated: August 10, 2026'). Acceptable Use policy read from https://sbasite.com/Acceptable-Use/default.aspx — it governs authorized users of SBA's internal systems (employees/vendors), not public website visitors, and contains no arbitration or auto-renewal terms. No public 'Terms of Use' for the website itself could be located on sbasite.com; the Privacy Notice references 'our Terms of Use... as may be posted on the Website or otherwise made available to you,' so one may exist behind another channel, but it is not publicly discoverable via search — consumer-contract scoring (arbitration, cancellation traps) therefore reflects what is publicly available. No mirrors were needed; no fetches were blocked. SBA is a cell-tower REIT whose public site is investor/carrier-facing, so the visitor personal-data footprint is small and the score is correspondingly modest.
These notes come from the original draft and are not independent verification.