This policy is part of the Terms of Service between you and MobileValidate LLC ("we"). It covers every use of the MobileValidate API, dashboard, SDKs, command-line tool, MCP server and any AI agent acting with your keys. Words defined in the Terms have the same meaning here.
What is the service for?
MobileValidate exists to fight spam, fraud and abuse, and to help businesses, carriers, messaging providers and online services reach the right people on the right channel. It checks phone numbers and e-mail addresses you submit. Typical uses:
- screening sign-ups and one-time-passcode requests for fake, disposable or unreachable numbers;
- cleaning contact data before messages are sent, and removing numbers that can't receive them;
- choosing the channel a contact can actually receive, and routing traffic;
- checking that a lead is plausible before a salesperson calls;
- screening inbound or outbound calls against spam-reputation signals.
You decide how to use the service for your business, and we don't ask you to explain your use case. That freedom comes with full responsibility: you alone are responsible, and liable, for complying with every law and third-party rule that applies to the data you submit, to your purposes and to how you use the results. Our approval of an account, and our technical controls, do not shift any of that responsibility to us.
What is prohibited?
You must not use the service, or let anyone else use it, to:
- Break the law where you operate or where your contacts are, including privacy and data-protection law and the messaging, telemarketing and marketing rules that apply to you (such as the TCPA, do-not-call rules, PECR, the ePrivacy rules and CAN-SPAM). Sending unsolicited messages or calls in breach of those rules, or finding recipients for them, is prohibited.
- Enumerate identifiers. This means checking sequential or generated number ranges, or generated lists of e-mail addresses, to discover who uses a platform. It includes any attempt to "find all users" of an app or service.
- Stalk, harass, monitor or locate a person, or find out whether a specific private individual uses an app without a legitimate business reason.
- Identify or profile individuals, including combining results with other data to identify people who have not dealt with you, or to build or enrich profiles of private individuals.
- Make eligibility decisions about credit, insurance, employment, housing, tenancy or similar matters, or use results as a consumer report under the US Fair Credit Reporting Act or similar laws.
- Discriminate against anyone on the basis of results, or infer sensitive characteristics.
- Resell or redistribute the service or its results, or offer them as part of a competing product or dataset, without our written agreement.
- Get around our controls, including rate limits, daily caps, spend caps, anti-enumeration rules, suppression and opt-outs, blocked jurisdictions or entitlements. This covers splitting requests, or spreading them across keys or accounts, to avoid limits.
- Test or attack the service, including probing, scanning or load testing without written permission, using test keys to probe live behaviour, or introducing malicious code.
- Serve sanctioned persons or jurisdictions, as described in section 13 of the Terms.
- Breach a platform's or carrier's rules that apply to you, including their business-messaging and opt-in rules.
- Check accounts without specific authority. Check whether a person has an account on a named messaging app, social network, online service or mailbox provider unless your lawful basis covers that specific check, as section 5 (item 9) of the Terms requires. A general marketing opt-in is not enough.
- Claim a platform connection. State or imply that you or your results are affiliated with, endorsed by or obtained from any platform, or present results to others as coming from a platform.
- Use results as permission. Treat a result as consent to contact someone, or contact a person only because a result shows an account.
What do you confirm to us?
By using the service you confirm the warranties in section 5 of the Terms of Service. In short, you confirm that you have a lawful basis for every identifier you submit and every use you make of the results, that you have given any notices the law requires, that you are the controller of that data, and that you honour opt-outs and objections.
You understand that results are signals observed at a point in time (checked_at). They are not proof of identity, ownership or consent, and cannot replace KYC, AML or consent records. A spam-reputation level of no_reports does not mean a number is safe. Checks never return names, photos or profiles, and you must not try to obtain them through the service.
How do we enforce this policy?
We use automated controls against abuse. Requests that look like sequential number ranges or generated e-mail lists are rejected, and rate limits and daily caps apply to every account.
If we suspect a breach of this policy, the Terms or the law, we may, at our discretion and without notice:
- reject requests, reduce limits or disable services for your account;
- suspend or revoke API keys;
- suspend or close the account, with the consequences for credit set out in section 10 of the Terms;
- report suspected unlawful activity to law-enforcement and other competent authorities;
- cooperate with platforms, carriers, messaging providers and other affected parties on reports of abuse, and share with them the information reasonably needed to investigate and stop it, as the law allows;
- act on verified requests from platforms and their representatives received through our Platform Rights Center, including by suspending or removing checks for all customers.
We are not liable for any of these measures. Nothing in this policy obliges us to monitor your use, and our not acting on a breach does not waive our rights.
How do you report abuse?
To report abuse of the service, e-mail abuse@mobilevalidate.com. People who want their own number or e-mail address excluded from checks can use the opt-out form. Platform owners, carriers and their authorised representatives can ask us to review, restrict or remove a check through the Platform Rights Center.