Is Mercury safe with your data?
Mercury
Weak disclosure · high confidence
Mercury earns a D (47/100) because it leaves much about its data practices unstated.
#99
of 216 apps ranked
47
score · Finance avg 37
+10
vs category average
Mercury's privacy policy sets out detailed rights, recipient categories and data types for a regulated financial service, and it says nothing at all about whether customer data or AI prompts train models.
What Mercury's privacy policy and terms of service say about your data
No training disclosure
Neither the privacy policy nor the terms say whether customer data or Mercury AI prompts are used to train models, and no opt-out mechanism is described.
Retention has no period
Information is kept "only as long as necessary" against a list of factors, with no number anywhere, and the policy adds that some records may be held for extended periods because Mercury operates in a regulated financial environment.
Sharing is named and opt-out is real
The policy enumerates recipient categories with a per-category disclosure table, states no sale for money, concedes that cookie-based advertising may count as a "sale" or "sharing" under U.S. law, and points to a Your Privacy Choices link and Global Privacy Control.
Security rests on adjectives
Protection is described as "reasonable efforts" with no named control such as encryption or access management, breach notice is promised only where law requires it, and no certification or dedicated privacy contact is named beyond a general support address.
What the policy is silent or vague on
- Not stated: keeping user inputs out of model training
- Not stated: a way to opt out of training
- Not stated: whether training use differs by plan
- Not stated: a deletion timeline after closure or request
Mercury privacy rating
Details
- Category
- Finance
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2026-08-27
- Region scored
- Global / US-default
- Last assessed
- 2026-10-13
Documents examined
Other finance apps
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.