Nordstrom Rack
Nothing confirmed
Unassigned
Companies
Every company record in the dataset, worst first. Rows marked unverified have not been checked against a primary source.
Results
Norwegian Cruise Line (NCL Holdings)
Nothing confirmed
Unassigned
Nvidia
Nvidia was named in October 2025 in a 'broken banner' tracking-consent action - the allegation being that a cookie banner presented choices that did not…
Unassigned
O'Reilly Automotive
Nothing confirmed
Unassigned
OfferUp
As quoted in a prior review (not re-verified this pass; OfferUp's terms page blocked automated retrieval), OfferUp's arbitration clause applies RETROACTIVELY…
Unassigned
Old Point National Bank
N/A — see TowneBank row; this bank no longer exists as a separate entity.
Unassigned
Old Republic International
Nothing confirmed
Unassigned
Omnicom
The acquiring party in the Omnicom-Interpublic combination (completed Nov. 26, 2025), creating one of the largest advertising and marketing data operations in…
Unassigned
One Medical (Amazon)
Nothing confirmed
Unassigned
OpenStax
Nothing confirmed
Unassigned
OpenTable
OpenTable's privacy policy mentions 'the possibility, under certain conditions,' of binding arbitration only in its EU-U.S.
Unassigned
Optimum (Altice USA)
Nothing confirmed
Unassigned
Oracle
CVE-2025-61882 in Oracle's E-Business Suite is the row's substance, and the reason it matters to consumers who have never heard of EBS is that it is…
Unassigned
Orangetheory Fitness
Nothing confirmed
Unassigned
Oscar Health
Nothing confirmed
Unassigned
Oura (Oura Health Oy / Ouraring Inc.)
Oura's biggest privacy moment was a customer backlash, not a breach.
Unassigned
PG&E
PG&E is the utility whose findings are least about data: it pleaded guilty to involuntary manslaughter over the Camp Fire, filed for bankruptcy under wildfire…
Unassigned
PNC
Nothing confirmed
Unassigned
PPL
Pennsylvania and Kentucky utility with a footprint adjacent to this tracker's core region.
Unassigned
PVH (Calvin Klein/Tommy Hilfiger)
A brand holding company, so Calvin Klein and Tommy Hilfiger customer data sits with one parent despite being marketed as distinct labels at different price…
Unassigned
Pacific Life
Life insurers hold the most durable personal data in financial services — medical underwriting records, beneficiary designations and family structure…
Unassigned
Palo Alto Networks
Nothing consumer-facing confirmed this pass.
Unassigned
Panera Bread
Panera shows a genuine double-jeopardy pattern of repeated breaches, and the first one carries a detail worth remembering…
Unassigned
Payless Car Rental (Avis Budget)
Payless is the fourth Avis Budget brand, and the group structure means Avis, Budget, Payless and Zipcar share one data controller despite occupying visibly…
Unassigned
Pfizer
Nothing confirmed
Unassigned
PhysiApp
Nothing confirmed
Unassigned
Pinterest's own tracking pixel has been cited as a named THIRD-PARTY tracker in OTHER companies' lawsuits (examples not re-verified this pass)…
Unassigned
Playground AI
Nothing confirmed
Unassigned
Poshmark
Attorneys allege Poshmark shares your browsing activity with PAYPAL even if you never once use PayPal to check out or buy anything on the app…
Unassigned
Potomac Edison (FirstEnergy)
Nothing confirmed
Unassigned
Presidential Bank
The most notable thing about Presidential Bank's terms is that there's almost nothing to find — a genuinely thin public record for a bank holding real…
Unassigned
Principal Financial Group
Nothing confirmed
Unassigned
Procter & Gamble
P&G's brand portfolio spans feminine care, incontinence, pregnancy testing and infant products, and its loyalty and sampling programmes collect life-stage…
Unassigned
Proton Mail
Proton's 2021 case is the most instructive entry in this tab because it shows precisely where a privacy promise ends.
Unassigned
Public Storage
Nothing confirmed
Unassigned
Public.com
Nothing confirmed
Unassigned
Publix Super Markets
Employee-owned and privately held, which is a genuinely different governance structure — no external shareholder pressure to monetise customer data…
Unassigned
Qatar Airways
Nothing confirmed
Unassigned
Qualcomm
Nothing consumer-facing confirmed this pass.
Unassigned
Radisson Hotel Group
The same Radisson sign means two different companies depending on which continent you are standing on…
Unassigned
Rappahannock Electric Cooperative
Nothing confirmed
Unassigned
Ray Dalio Principles
Nothing confirmed
Unassigned
Raymond James
Same structural pattern as Edward Jones (this same tab): mandatory pre-signed arbitration means advisor-misconduct complaints…
Unassigned
Redfin
Same VPPA and CIPA video-tracking theory as Zillow, filed the same period - two direct competitors, identical alleged conduct, which tells you the practice…
Unassigned
Regal Cinemas (Cineworld Group)
Same structural VPPA exemption as AMC - courts have reportedly found (per the AMC row; not re-verified this pass) movie theatres fall outside the statute's…
Unassigned
Regeneron Pharmaceuticals
Nothing confirmed
Unassigned
Reinsurance of America
RGA holds policyholder-level data from the primary carriers it reinsures, which means a consumer's medical underwriting information…
Unassigned
Republic Services
Same non-optional municipal franchise structure as Waste Management, with the same route telematics and curbside camera systems.
Unassigned
Rise Sleep
Nothing confirmed
Unassigned
Rivian (Rivian App)
Rivian's arbitration clause requires that arbitration proceedings be kept STRICTLY CONFIDENTIAL — including the mere FACT that an arbitration is happening at…
Unassigned
Try fewer filters, or clear them all.