> Neither Goldman Sachs nor Mastercard share or sell your transaction information with third parties for advertising or marketing.

Hmm, I wonder why they sell it then? Since they needed the "advertising or marketing" qualifier, they obviously sell data to third parties.

Two thoughts:

1. Maybe they are selling purchase data to hedge funds? Lots of possible use cases.

2. Maybe some regulation only requires them to disclose if the information is sold for advertising or marketing (I think I remember this showing up on some post-CFPB credit card disclosure forms). Therefore the lack of such a disclosure for other uses for the information could mean nothing, just that they are minimizing discourses that aren’t legally obligated.

Definitely some of #2 going on. A lot of the language surrounding privacy disclosure requirements under the Gramm-Leach-Bliley Act is literally copy-paste from a form that the FTC suggests for compliance with the law.

Just about anyone with a financial account in the US will probably instantly recognize this form:

https://www.ftc.gov/system/files/documents/rules/privacy-con...

My guess is fraud detection partners? Some company that aggregates transaction data to spot patterns of abuse or fraud, and in turn provides services to their customers to mitigate it.

Governments probably fall under 3rd parties?