Retail & Fintech · Telecom (MVNO) · Structural / no discrete incident
Google Fi
Headline
The January 2023 Google Fi disclosure is notable for what it reveals about mobile virtual network operators: Google Fi does not own network infrastructure, it resells capacity from underlying carriers, and the exposure…
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
The January 2023 Google Fi disclosure is notable for what it reveals about mobile virtual network operators: Google Fi does not own network infrastructure, it resells capacity from underlying carriers, and the exposure came through that upstream relationship rather than through Google. A customer who chose Google Fi specifically because they trusted Google's security was exposed by a carrier they never selected and were never told the name of. Cross-ref the Carriers tab for the underlying operators' own records.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass — standard binding arbitration + class action waiver expected.
Data sharing
HISTORICAL CONFIRMED BREACH (disclosed January 2023): Google Fi told customers that limited data (phone numbers, SIM card serial numbers, plan and account-status information; Google said no names, payment data, passwords or message content) was exposed through its unnamed 'primary network provider', widely identified as T-Mobile (the only US network Google Fi has used since its U.S. Cellular partnership ended in February 2023) — illustrating how an MVNO (mobile virtual network operator) like Google Fi can be affected by a breach at the underlying NETWORK CARRIER it depends on, even without its own direct systems being compromised. Google's overall $425M jury verdict, $135M Android settlement, and other privacy findings (documented in the Google row, Consumer Apps tab) also apply to Google Fi as a Google-operated service.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. dpo-google@google.com (primary route is the Google privacy help form)
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. PARENT ADDRESS ONLY — verify before using for legal notice. Google Fi is an MVNO; the underlying carriers are separate entities (see the Carriers tab). Parent: Google LLC, Attn: Data Protection, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy fi.google.com/about/privacy/ | Not fetched yet | NO (HTML only) |
| Terms of service fi.google.com/about/tos/ | Not fetched yet | NO (HTML only) |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.