Home Depot Is Accused of Selling Your Data. Here Are 5 Sneaky Ways Stores Cash in on You.
A July 1 federal class action in Virginia alleges Home Depot sells customers’ personal information, including names, contact details, and purchase histories, to third parties without notice or consent, citing violations of Virginia’s Personal Information Privacy Act. The suit focuses on Home Depot’s Orange Apron Media retail advertising unit. Home Depot has not been found liable.
How this was made
The 30-second read
Why it matters
If the allegations are substantiated, Home Depot could face remedies such as injunctions, compliance changes, and potential settlements, which would affect retail media economics and litigation costs. If dismissed or settled on non-material terms, the financial impact may be limited.
Market read
Company-specific privacy litigation risk for a major retailer’s retail media/data monetization model, with potential compliance and legal-cost implications if the case progresses.
What to watch
The article does not specify whether the alleged conduct is ongoing, the scope of affected data, or any quantified damages, which are key drivers of materiality for HD’s risk premium.
Background
The piece frames a federal class action alleging Home Depot monetized customer personal data through its in-house retail media unit, Orange Apron Media, and compares it to similar litigation involving other retailers’ ad networks.
Ticker impact
Home Depot is named in a July 1 federal class action alleging it sold customers’ personal data via Orange Apron Media without consent.
Near-term impact likely limited unless the case escalates to a regulator action, injunction, or material settlement; watch for legal/PR headlines.
The article is allegation-based and provides no damages, ruling, or settlement terms. However, it is a direct, company-specific privacy claim that could drive compliance costs and litigation risk if it gains traction.
Market effects
Retail media networks and “clean room” data-sharing models face heightened litigation scrutiny, potentially pressuring compliance and ad-tech practices across large retailers.
US privacy-law enforcement and state opt-out regimes could increase operational friction for retailers’ data monetization strategies.
Cross-border precedents (e.g., Canada e-receipts sharing) reinforce that privacy enforcement can spread internationally, affecting multinational retail media operations.
Counterpoint
Home Depot may ultimately prevail, and the market may discount the case until there is a court ruling, regulator finding, or quantified financial impact.
Key entities
- public_companyHome Depot
Accused in a July 1 federal class action of selling customers’ personal information without notice or consent via Orange Apron Media.
- business_unitOrange Apron Media
Home Depot in-house advertising business at the center of the lawsuit’s data-sharing allegations.
- public_companyBest Buy
Referenced for a similar class action tied to its ad network and use of a “clean room” operated by LiveRamp.
- public_companyMeta
Referenced in a Canada case involving e-receipt data sharing with Meta without customers’ knowledge or consent.

