Privacy review
Developers are responsible for protecting user privacy. When users authorize or use your app, they enter into an agreement directly with you. To support this, Zoom requires every app to publish a privacy statement that explains how you handle user data, including sensitive data types. During the review process or after your app is published, Zoom may request additional details about your data handling practices.
To better serve our developer community, Zoom may update the number or type of required questions in the build flow or review process at its discretion.
Why are these privacy questions important?
Zoom is committed to protecting user privacy and data. Teams worldwide rely on Zoom to work, connect, learn, provide healthcare, deliver services, and host events. We are transparent about how we collect and use data, and we expect third-party apps in the Zoom App Marketplace to follow the same standards—collecting only necessary data, protecting it, and clearly disclosing how it's used.
Privacy practices
During review, we confirm that your submitted documents match your company name and clearly describe your data handling practices, including how you:
- Access, collect, and use data.
- Retain and share information.
- Allow users to exercise their data rights.
Before authorizing an app, users can review your Privacy Policy and Terms of Use. This process is designed to promote user trust and developer transparency.
Personal user data collection
If your app collects sensitive data or data that isn't required for basic functionality, you must clearly explain why you need it. Your privacy policy must also describe how you handle this data.
We may request additional details in cases such as:
- Collecting a home address for basic functionality.
- Requesting access to sensitive personal information beyond core features.
- Gathering location data for services not based on location.
For sensitive data types, you must provide valid explanations that align with your app's purpose. Examples include:
- "We collect location data to suggest nearby meeting rooms based on user location."
- "Contact information is used only for meeting invitation functionality."
Sensitive data types include:
- Race or ethnic origin.
- Political, religious, or philosophical beliefs.
- Trade union membership.
- Biometric or genetic information.
- Personal health, sexual activity, or sexual orientation.
- Criminal history.
- Financial data.
Delays in reviews
Incomplete or unclear privacy explanations may delay or prevent your app from being approved. Clear disclosures build user trust and create a better experience for everyone.
App category verification
Your app's category must accurately reflect its core functionality. Specialized categories such as Healthcare, Education, and Government are reserved for apps specifically designed for those sectors.
For example, if your app supports the delivery of healthcare services, select Healthcare instead of Health & Wellness. This helps explain why your app may need access to sensitive information.
Incorrect categorization can:
- Make the Marketplace harder to navigate.
- Mislead users about your app's functionality.
- Result in incorrect BAA disclaimers.
Questions?
Contact us at integration.testers@zoom.us.
For additional support, visit Zoom Developer Forum - Marketplace.