What Data TikTok Collects (It Is More Than You Think)

TikTok's data collection practices go far beyond recording the videos you watch and post. A thorough review of TikTok's privacy policy and independent technical audits reveals a data collection apparatus that is among the most aggressive of any consumer app.

Device and Technical Identifiers

TikTok collects your device model, operating system version, screen resolution, keystroke patterns and rhythms, battery state, audio settings, connected Bluetooth devices, and installed apps. On Android, TikTok historically collected MAC addresses and IMEI numbers, though recent OS restrictions have limited some of this access. TikTok also collects your device's advertising identifier, SIM card serial number, and carrier information.

Clipboard and Input Data

TikTok was caught accessing the iOS clipboard in real time in 2020, a practice exposed by an iOS 14 privacy feature that alerts users when an app reads the clipboard. TikTok stated this was part of an "anti-spam" measure and pushed an update to stop the behavior, but the incident highlighted the depth of data access the app was designed to have.

Biometric Data

TikTok's privacy policy explicitly states that it may collect "faceprints and voiceprints" from user-generated content. In 2021, TikTok quietly updated its U.S. privacy policy to include the collection of biometric identifiers. This data is extracted from the videos you create and, in some cases, from videos you interact with.

Location Data

TikTok collects precise GPS location (when permitted), as well as approximate location derived from IP addresses, SIM card information, and Wi-Fi access points. Even when GPS permission is denied, TikTok can estimate your location with reasonable accuracy through IP geolocation and network information.

Browsing and Activity Data

Every video you watch, how long you watch it, which part of the screen you tap, which videos you rewatch, your search queries, and every interaction you make within the app is logged. TikTok also collects data about your activity on third-party websites and apps through its advertising pixel (TikTok Pixel), which functions similarly to the Meta Pixel.

Content of Messages

TikTok collects the content of messages sent through its in-app messaging feature, including text, images, and videos. TikTok's privacy policy states this data may be used to enforce community guidelines and for "safety purposes."

Data Shared with ByteDance

TikTok is owned by ByteDance, a Beijing-headquartered company. Despite TikTok's "Project Texas" initiative to store U.S. user data on Oracle servers in the United States, reporting by Forbes and internal documents reviewed by multiple news organizations have shown that ByteDance employees in China have accessed U.S. user data. The extent of ongoing data sharing between TikTok's U.S. operations and ByteDance's Chinese operations remains a subject of active Congressional scrutiny and litigation as of 2026.

How to Delete Your TikTok Account

Mobile App Deletion (iOS and Android)

Open the TikTok app
Tap Profile in the bottom right corner
Tap the three-line menu icon in the top right
Select Settings and privacy
Tap Account
Select Deactivate or delete account
Choose Delete account permanently
TikTok will show you what happens when you delete (loss of content, virtual items, etc.)
Tap Continue
Verify your identity through the method TikTok prompts (phone, email, or password)
Confirm deletion

Desktop Browser Deletion

Log into tiktok.com in a web browser
Click your profile icon in the top right
Select Settings
Navigate to Manage account
Click Delete account
Follow the verification prompts

The 30-Day Deactivation Period

After you initiate deletion, TikTok deactivates your account for 30 days. During this window, your profile and content are hidden but your data is fully retained. If you log back in, the deletion is cancelled.

After 30 days, TikTok begins permanently deleting your account. However, TikTok states that some data may take up to an additional 90 days to be fully removed from their servers and backup systems.

The Separate CCPA Data Deletion Request

This is the critical step that most TikTok deletion guides miss entirely. Deleting your TikTok account through the app is a product-level action. It is not the same as exercising your legal right to data deletion under the California Consumer Privacy Act.

The CCPA provides you with a legally enforceable right to have your personal information deleted, and it covers data that may not be included in a standard account deletion, including data derived from your usage, data shared with third-party partners, and data held in analytics and advertising systems.

How to Submit a CCPA Deletion Request to TikTok

Visit TikTok's privacy page (accessible through the app settings under "Privacy" or via their website's privacy policy)
Locate the "Your Rights" or "Your Privacy Choices" section
Select the option to submit a data deletion request under CCPA
You will be asked to verify your identity, typically through your TikTok-associated email address or phone number
Specify that you are requesting deletion of all personal information under California Civil Code Section 1798.105
Submit the request and save your confirmation

The 45-Day Response Window

TikTok is legally required to respond to your CCPA request within 45 calendar days. They may extend this by an additional 45 days if they provide notice. If TikTok fails to respond or refuses your request without a valid legal exception, you can file a complaint with the California Privacy Protection Agency.

Why Both Processes Are Necessary

The account deletion process removes your visible profile and content. The CCPA deletion request covers the deeper data layers: advertising profiles, behavioral analytics, data shared with TikTok's advertising partners, and information held in systems that are not directly tied to your user account. Running both processes in parallel gives you the most comprehensive data removal possible from TikTok's ecosystem.

What TikTok Keeps After Deletion

Even after both the account deletion and CCPA request, certain data persists:

Data already shared with advertisers. TikTok operates a massive advertising platform. Data shared with advertising partners through TikTok's ad network, measurement partners, and data clean rooms is held by those third parties. TikTok cannot recall data that has already been transmitted to other companies.

Aggregated and anonymized analytics. TikTok retains aggregated data about user behavior, content trends, and platform performance. While this data is stripped of direct identifiers, the aggregation process means your usage patterns are baked into datasets that TikTok continues to use.

Legal and compliance archives. Any data subject to legal holds, government requests, or ongoing investigations is retained indefinitely regardless of your deletion request. Given the extensive U.S. government scrutiny of TikTok, this exception may apply more broadly than with other platforms.

Content reposted by other users. If other users stitched, dueted, or downloaded your videos (if download was enabled), those copies exist independently of your account. TikTok cannot delete content that other users have saved to their own devices.

ByteDance's data ecosystem. The extent to which your TikTok data persists within ByteDance's broader data infrastructure, which includes other apps and services primarily operating in the Chinese market, is not fully transparent. ByteDance's internal data governance practices are not subject to the same transparency requirements as U.S.-based companies.

TikTok Data on People-Search Sites

Your TikTok activity feeds into the data broker ecosystem through multiple pathways:

Direct scraping. Data brokers and their partners scrape publicly available TikTok profiles, collecting usernames, profile photos, biographical information, and linked social media accounts. If your TikTok profile was public at any point, this data was likely collected.

Advertising data partnerships. TikTok shares data with advertising and measurement partners. Some of these partners are also data brokers or sell data to brokers. The chain of custody for advertising data is opaque, and once your information enters the advertising data ecosystem, it circulates widely.

App usage and device data. Mobile advertising networks can identify that you use TikTok based on your advertising identifier and device fingerprint. This information is combined with other data points to build profiles that are sold through data broker networks.

Public records enrichment. Data brokers combine your TikTok-derived data (interests, location, social connections) with public records (property ownership, voter registration, court records) to build comprehensive profiles that are far more detailed than what either source provides alone.

The result is that people-search sites like Spokeo, BeenVerified, and Radaris may list your social media profiles, associated interests, and even social connections derived from your TikTok data -- and this information persists long after you delete your TikTok account.

Cleaning Up After TikTok Deletion

After you have deleted your TikTok account and submitted your CCPA request, the final step is addressing the data broker ecosystem that has already collected your information.

You need to search for yourself on major people-search sites and submit individual opt-out requests to each one. This is a manual, time-consuming process that needs to be repeated regularly because data brokers continuously re-aggregate information from new sources.

Key brokers to check include Spokeo, BeenVerified, Radaris, TruePeopleSearch, WhitePages, Intelius, PeopleLooker, FastPeopleSearch, and MyLife. Each has a separate opt-out process with different requirements and timelines.

Automate Your Privacy with GhostMyData

Deleting your TikTok account stops the bleeding, but it does not clean up the data that has already been scattered across the broker ecosystem. GhostMyData handles the comprehensive cleanup:

Scans 1,500+ data broker sites to find everywhere your personal information appears
Submits automated opt-out and deletion requests to each broker on your behalf
Monitors for re-listings because data brokers continuously refresh their databases
Sends CCPA deletion requests to brokers that require formal legal process
Tracks removal progress so you know exactly which brokers still have your data

Your TikTok account is one source. The data broker network is the real exposure.

Start your free privacy scan to see where your personal information is exposed across 1,500+ data broker sites.

Frequently Asked Questions

Does deleting TikTok also delete data from ByteDance's other apps?

No. Deleting your TikTok account only affects data associated with TikTok's platform. ByteDance operates numerous other apps and services, including CapCut, Lemon8, and several apps in the Chinese market. If you used the same email or phone number to register for other ByteDance services, that data is unaffected by your TikTok deletion. You would need to delete each account and submit separate data deletion requests for each service.

How long does it actually take for TikTok to delete my data?

TikTok's stated timeline is 30 days of deactivation followed by up to 90 additional days for complete deletion from servers and backups. In practice, CCPA requests have a separate 45-day response window (extendable to 90 days). From the moment you initiate both processes, expect up to 120 days before your data is fully removed from TikTok's primary systems. Data shared with third parties is not covered by this timeline.

Can I delete my TikTok account without a phone number or email?

You need access to at least one of your verified contact methods (phone number or email) to complete the identity verification step during deletion. If you no longer have access to either, you will need to contact TikTok support directly through their help center and go through an alternative identity verification process, which may require a government-issued ID.

Will my TikTok data still appear on Google after deletion?

Yes, temporarily. Google's cached versions of your TikTok profile page may persist for weeks or months after account deletion. You can use Google's Remove Outdated Content tool to request faster cache removal. Additionally, data broker sites that scraped your TikTok data will continue to display that information in Google search results until you opt out of each broker separately.

Is TikTok worse for privacy than Instagram or Facebook?

The data collection practices are broadly similar in scope, but TikTok presents unique concerns. The keystroke logging, clipboard access history, and biometric data collection are more aggressive than most U.S.-based platforms. The data relationship with ByteDance and the Chinese government's data access laws (which can compel Chinese companies to share data) create a geopolitical dimension that does not exist with Meta or Google. That said, all major social media platforms collect extensive personal data and feed the data broker ecosystem.

How to Delete Your TikTok Account and Remove Your Data (2026)