Legal

Is It Legal to Scrape Google Maps? A Straight Answer

Updated September 25, 20267 min read

This is general information, not legal advice. Scraping and outreach law varies by jurisdiction and depends on the specifics of what you're doing -- talk to a lawyer if this is central to your business.

This question comes up constantly, and the honest answer has a few separate parts to it: whether scraping public data is generally lawful, whether it can still violate a website's own terms, and whether what you do with the data afterward (cold email, cold calling, texting) has its own rules. They're often conflated into one yes/no question, but they're genuinely different issues.

Scraping publicly available data: generally on solid ground

The most-cited case here is hiQ Labs v. LinkedIn, where the Ninth Circuit Court of Appeals ruled that scraping data that's publicly visible without logging in generally doesn't violate the Computer Fraud and Abuse Act (CFAA) -- the main US federal anti-hacking statute. Google Maps business listings (name, address, category, public phone number) are publicly visible without an account, which is the kind of data this reasoning is built around. It's a federal appeals court ruling, not a Supreme Court decision covering the whole country, but it's the leading precedent most scraping-legality discussions reference.

Terms of Service: a separate, contract-based issue

Google's Terms of Service prohibit automated access to its services without explicit permission. Violating a website's terms is generally treated as a contract law matter, not a criminal one -- the practical consequence is usually the platform rate-limiting, blocking, or banning the account or IP involved, rather than a lawsuit. This is a real, separate risk from the CFAA question above, and it's part of why purpose-built scraping tools exist as intermediaries: they take on that operational risk (IP blocks, rate limits) rather than you running the requests directly from your own infrastructure and account.

What you do with the data afterward has its own rules

This is the part people skip past, and it's often the part that actually matters more day to day. Collecting a business's public contact info is one legal question; emailing, calling, or texting that business is a separate one, governed by separate law:

Cold email in the US is governed by CAN-SPAM: no deceptive subject lines or headers, a working unsubscribe mechanism honored within 10 business days, and your real physical address included. It doesn't require opt-in consent the way some other jurisdictions' email laws do.
Cold calling and texting fall under the TCPA, which is considerably stricter, especially for text messages and automated/prerecorded calls to cell phones -- generally requiring prior consent, with statutory damages per violation that make this one of the higher-risk channels to get wrong. More detail here.
If you or your contacts operate in the EU/UK, GDPR adds another layer around processing personal data, which can apply even to a scraped business contact if it's tied to an identifiable individual rather than a generic company inbox.

The practical takeaway

Scraping publicly visible Google Maps business listings sits on reasonably solid legal footing based on current US case law, separate from Google's own terms (a contract issue, not a criminal one). The bigger compliance risk for most people using this data isn't the scraping step at all -- it's what happens next in the outreach campaign. That's worth more of your attention than the scraping question itself.

FAQ

Has a court actually ruled on scraping public data?

Yes -- the most relevant US case is hiQ Labs v. LinkedIn, where the Ninth Circuit Court of Appeals held that scraping data that's publicly accessible (no login required) generally doesn't violate the Computer Fraud and Abuse Act. It's the case most legal analyses of scraping point back to, though it's specific to that federal statute and that circuit, not a blanket nationwide guarantee.

Can Google ban my account or IP for scraping?

Yes, and that's a separate issue from criminal or civil liability. Google's Terms of Service prohibit automated access to its services without permission, and violating that is a contract matter -- Google can rate-limit, block, or ban an account or IP address for it, independent of whether the scraping itself is otherwise lawful.

Is scraping business data the same as scraping personal data?

No, and this distinction matters a lot in practice. Business listing data (a company's name, public phone number, business address) is treated very differently under most privacy law than personal data about identifiable individuals. Scraping is generally on firmer ground the more clearly "business," not "personal," the data is.

Is this legal advice?

No. This is general information based on public reporting and case law, not legal advice for your specific situation. If scraping or outreach compliance is central to your business, talk to a lawyer who covers this area -- the answer can depend on your jurisdiction, what data you collect, and what you do with it afterward.

Built around public business listings only

Maplist scrapes publicly visible Google Maps business data -- names, addresses, phones, and public website emails.

Try Maplist Free