Privacy guide

What is a customer data platform (CDP)? Your data, unified.

Customer data platforms explained: how tools like a CDP combine your data from many sources into one profile, and what that means for your privacy.

The simple answer

A customer data platform, or CDP, is a tool that gathers your data from many sources, website, app, email, support, purchases, and stitches it into one unified profile of you.

The benefit for companies is a single view of the customer. The privacy trade-off is that scattered bits of data become one detailed profile, which makes purpose, consent and security more important.

What to check

1
Understand your data may be combined across channels.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

2
Look for unified-profile or CDP language in policies.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

3
Ask what sources feed your profile.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

4
Check how you can access or delete the unified profile.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

From our investigation

Scattered data becomes one profile.

State of Privacy cares about data unification because a single combined profile can reveal far more than any one source alone, which raises the stakes for consent and security.

What to do next

1
Ask companies what data sources they combine.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

2
Use access and deletion rights on the full profile.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

3
Share less across channels by default.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

People also ask

What does a CDP do?

It combines your data from many sources into one unified customer profile for marketing and analytics.

Why is a unified profile a concern?

Because combining sources can reveal more about you than any single source, so purpose and consent matter more.

Can I see my profile?

You can ask the company, using access and deletion rights, what it holds and request changes.

If you are a company
Check your own website.

How many trackers run on your pages? Does your privacy policy name them? Can you answer a data-rights email? If you don't know, we can help you find out.

Talk to Meridian Bridge Strategy →
Your right under Indian law
Mera data mera hai.

Your personal data belongs to you. You can ask a company what it holds and how to raise a privacy request. The response depends on the applicable duties, identity checks and any retention requirements.

Get the template email →
Read the full investigation.

The public report shows what we found in the company records. Check the observation dates and method.

Read the reportEvidence summaryTry the experience