Libby / OverDrive

What this pass recorded. Nothing confirmed this pass, and the structural finding is favourable enough to state plainly: library borrowing records carry statutory confidentiality protection in most US states - among the few categories of consumer reading data that does - and OverDrive operates on behalf of libraries bound by those laws. That is a genuinely stronger position than any commercial reading platform in this tracker. The caveat worth flagging is that state library-confidentiality statutes were written for physical circulation records, and how completely they reach a third-party app's own analytics and device telemetry is not settled. Recommend a follow-up on OverDrive's independent data collection as distinct from the library's circulation record.

• Severity
• Evidence tierUnassigned
• Claims confirmed
• Last verified2026-08-04

Primary source. None recorded — Unverified - heuristic first draft.

Arbitration

Not independently confirmed this pass — standard binding arbitration + class action waiver expected for individual Libby app accounts.

Data sharing

Not independently confirmed this pass with a specific named lawsuit or breach. OverDrive/Libby (acquired by KKR in 2020) is the dominant e-book/audiobook lending platform used by public libraries nationwide, including systems across the DMV — meaning most patron reading-history data flows through this single third-party vendor rather than being held directly by the local library itself, a structurally important point for any library-privacy-focused advocacy: READING HISTORY has historically been treated with special legal sensitivity (many states have 'reader privacy' statutes specifically restricting law-enforcement access to library records), but a third-party vendor like OverDrive may not always be bound by the same library-specific confidentiality statutes that apply to the library itself.

Contacts

Privacy contact. Not recorded.

Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.

Mailing address. Not recorded.