Your data vendor has a side deal
March 2026 saw the emergence of two important legal actions involving data brokers. Though one is trickling through San Francisco Superior Court and the other is from the FTC, the stories follow the same pattern: a founder holds a private investment in a third-party company, and that relationship quietly shapes how data flows and how reports get produced.
OkCupid and Clarifai
On March 30, 2026, the FTC announced a settlement with OkCupid and its parent Match Group Americas over conduct dating to September 2014. OkCupid is alleged to have handed over nearly three million user photos, along with geolocation and demographic data, to a facial recognition company called Clarifai. The transfer occurred not because Clarifai is a vendor, a business partner, or a corporate affiliate to OkCupid (all permissible data recipients under the OkCupid privacy policy), but because OkCupid’s founders were personally invested in Clarifai. OkCupid did not have a contract with Clarifai to govern the use of the data. No users were notified. And nothing in OkCupid’s privacy policy permitted sharing with a founder-backed company.
SemiAnalysis and FluidStack
The second case has captured the attention of the alternative data community and is still in litigation. On March 30, 2026, a former SemiAnalysis employee named Wei Zhou filed a complaint in San Francisco Superior Court against the company and its founder, Dylan Patel. Zhou alleges that Patel held a $50M personal investment stake in FluidStack, a private GPU cloud company, and directed SemiAnalysis employees to use MNPI obtained from FluidStack (e.g. sales figures and deployments to companies such as Meta and Anthropic) to create investor reports. Observers have since noted that FluidStack also received a conspicuously favorable “Gold tier” ranking in SemiAnalysis's InferenceX product. Zhou also alleges that the SemiAnalysis personnel responsible for compliance were too busy doing fundraising work for Patel’s private investment fund to focus on safeguarding against MNPI. Glacier had initially notified clients on February 19th, 2026 regarding potential VC investments by SemiAnalysis’ CEO.
The Common Thread: Invisible Conflicts, Real Exposure
Both cases share a structural feature that should concern any data compliance program. Neither conflict was disclosed in the ordinary course of vendor diligence. The relationship between OkCupid’s founders and Clarifai was invisible until a news report surfaced it years later. The relationship between Patel and FluidStack became visible only through litigation brought by a terminated employee.
This asymmetry makes founder conflicts particularly worrisome for data buyers. The industry-standard diligence review (reviewing privacy policies, confirming licensing representations, checking for regulatory history, etc.) is geared towards catching disclosed relationships. It does not surface the investment that a founder holds in a portfolio company that provides confidential information or receives user data in a sweetheart arrangement. Moreover, a founder who has routed user data to a portfolio company via personal email, or embedded MNPI into a commercial product, is not likely to volunteer that on a standard DDQ.
Buyers may consider asking more pointed questions on a DDQ, and in fact Glacier has recently advised clients on designing specific questions to elicit information about founder conflicts. However, corroborative diligence such as reviewing founder investment activity through public filings, LinkedIn, and litigation databases may be the only way to surface what a vendor won’t say.
No matter how a data compliance team handles complex diligence, it’s clear that the question to ask is not just “who owns this vendor?” but “what else does the founder own, and does the data or research we're buying touch it?” As these cases demonstrate, regulators are increasingly willing to pursue that question. Your diligence program should be too.
Glacier leads the data industry in surveilling alternative data providers. Please reach out to us if you would like to learn more about our offerings.