{
  "id": "CON-095",
  "slug": "con-095",
  "title": "The no-sharing statement must be reachable from the consent point",
  "statement": "The disclosure, or the privacy policy it links to, must state that mobile information is not shared with third parties for marketing purposes.",
  "rationale": "This is the single clause carriers care most about, because number-sharing is the mechanism behind most of the traffic 10DLC exists to suppress. It has to be findable from the opt-in rather than buried, since it is the promise the consumer is relying on when they hand over the number — and it is the clause free policy generators are least likely to include.",
  "layer": "CONSENT_FLOW",
  "layerSlug": "consent-flow",
  "object": "consent disclosure text; privacy policy body",
  "severity": "BLOCKING",
  "detectability": [
    "CRAWL"
  ],
  "failureClass": "TERMINAL_POLICY",
  "artifact": "privacy_policy",
  "authorities": [
    "Telnyx",
    "Bandwidth",
    "Twilio",
    "AWS",
    "Sinch",
    "Infobip",
    "Bird"
  ],
  "codes": [
    {
      "provider": "Telnyx",
      "code": "805",
      "remediable": true
    },
    {
      "provider": "Twilio",
      "code": "30908",
      "remediable": true,
      "generation": "gen2"
    }
  ],
  "applicabilityText": "Applies to every 10DLC registration.",
  "universal": true,
  "remediation": "Add the sentence \"Mobile information will not be sold or shared with third parties for promotional or marketing purposes.\" to the privacy policy, and make sure the opt-in links to that policy. \"Sold\" alone is not enough — Telnyx requires both words, because sharing without payment is the case that actually happens.",
  "example": "We will not sell or share your mobile information with third parties for promotional or marketing purposes. Text messaging originator opt-in data is not shared with any third parties.",
  "pitfalls": [
    "A general \"we do not sell your personal data\" clause does not satisfy this — the clause must name mobile information or phone numbers specifically."
  ],
  "phase": "approval",
  "automated": true,
  "url": "https://ekas.io/rules/10dlc/consent-flow/con-095/",
  "markdown": "https://ekas.io/rules/10dlc/consent-flow/con-095.md",
  "registry": "https://ekas.io/rules/10dlc/",
  "updated": "2026-07-25",
  "licence": "CC BY 4.0 — https://creativecommons.org/licenses/by/4.0/"
}