Data Report Card · Google
Google Data Report Card
Google Account
§ Enforcement action
Data
Practices
Practices
2Access2Portability2Friction2Deletion1Sells1Trains AI
=
C
§
8/12
Agent
Readiness
Readiness
2Access
2Portability
1API access
=
B
5/6
Agent Readiness is a derived signal — a synthesis of two existing cells (Access, Portability) plus one sourced factor (API access), not an independently measured grade. API access scale: Best (2) consumer-grantable API · Moderate (1) partial / encumbered · Restrictive (0) manual export only. What is Agent Readiness?
§ This grade reflects a 2-point deduction (severity 1) for a verified regulatory action: 10/12 on data practices − 2 = 8/12 → C. The enforcement record is below.
Reviewed Jun 2026 · policies are checked weekly for changes · stated — every cell is read from Google's published policy; none has been tested (run by us) yet.
2Accessstated
My Activity, Google Dashboard, and Takeout together give a comprehensive self-serve view, no fee.
Google Account — Data & Privacy · accessed Jun 2026 ↗2Portabilitystated
Takeout exports machine-readable
Google Takeout · accessed Jun 2026 ↗.mbox/.json/.csv/.vcf/.ics across nearly all products, including Gmail.2Frictionstated
Self-serve and fast, no account closure required, no retention traps.
Google Takeout flow · accessed Jun 2026 ↗2Deletionstated
Self-serve deletion plus auto-delete options (3, 18, or 36 months) with clear scope.
Google Account — Data & Privacy · accessed Jun 2026 ↗1Sells / sharesstated
"We never sell your personal information to anyone." But the core business is cross-context behavioral advertising; ad personalization opt-out lives in My Ad Center.
Google Privacy Policy · accessed Jun 2026 ↗1Trains AIstated
Gemini Apps Activity is on by default and a subset of chats are read by human reviewers and used to train Google's models, retained up to 3 years. In the US, Gmail's smart features stay on by default (opt-out), unlike the EEA, UK and Japan where they are off, and Personal Intelligence — which lets Gemini read Gmail, Photos and YouTube — became free for US users in March 2026 as an opt-in. Opt-outs live in Data & Privacy.
Gemini Apps Privacy Hub · accessed Jun 2026 ↗§Enforcement action — deducts 2 points (severity 1); data practices without the penalty scored B (10/12)verified
A coalition of 40 state attorneys general reached a $391.5 million settlement with Google in November 2022 over deceptive location-tracking practices — the largest US multistate privacy settlement at the time.
40-State AG Settlement · 14 Nov 2022 ↗1API access — feeds Agent Readiness, not the /12stated
Real OAuth APIs exist (Gmail, Calendar, Drive) and you can grant an app access, but third-party use is gated behind app verification and an annual CASA security review, and the consumer Data Portability API explicitly excludes Gmail — so autonomous, schedulable access for a personal agent is only partial. Takeout itself is a manual export.
Google — Data Portability API · accessed Jun 2026 ↗Source-verified Jun 2026 from Google's own pages. All cells are "stated" (read from published policy and support docs); we have not yet run a live Takeout or deletion to mark any cell "tested."
How to request your data from Google
- Go to https://takeout.google.com — Google's data-request entry point.
- takeout.google.com → select products → email download link.
- Expected wait: minutes to several days — Google's stated turnaround (we haven't independently timed a request yet).
These steps reflect Google's documented process as of Jun 2026. The wait time is the company's stated figure, not yet independently measured by us.