Module 2 Exercise: The Copied Notice

Study exercise. Invented company. Not a filing.

Scenario

NaijaRide, a ride-hailing app in Abuja, sends you a privacy notice copied from an American shop, plus this note from the product manager:

“We collect full name, phone number, and live GPS. We use the Google Maps API for navigation, Paystack for cards, and the Facebook SDK to see where installs came from. Data goes to cloud buckets on AWS. We keep location forever so we can study popular routes.”

Write

An advisory note of about 600 words to the founders:

1. Classify what is collected, and which integrations are disclosures to a processor.
2. Name at least two problems in the storage story. Retention and third-party tracking are the obvious pair. You may find others.
3. Draft a “third-party disclosures and retention” section that names the integrations they actually listed and refuses indefinite location storage. Do not paste a foreign template back at them.