Geolocation Privacy: How Your Location Data Gets Shared and Sold

How Your Location Data Gets Collected

Every time you carry a smartphone, check into a venue, or browse a website, your location data is being recorded. The methods used to pinpoint your position are more varied and persistent than most people realize.

GPS (Global Positioning System) is the most accurate method, placing you within a few meters using satellite signals. Apps that request location permissions — weather, maps, ride-sharing, fitness trackers — often use GPS to track your movements in real time.

Wi-Fi positioning triangulates your location based on nearby wireless access points. Even if you are not connected to a network, your device scans for available Wi-Fi signals, and those signals can be matched against databases of known access point locations maintained by companies like Google and Apple.

Cell tower triangulation uses the signal strength between your phone and nearby cellular towers to estimate your position. This data is collected by your mobile carrier and can be accurate to within a few hundred meters in urban areas.

Bluetooth beacons are small transmitters placed in retail stores, airports, and public spaces. When your phone detects these beacons, apps with Bluetooth permissions can log your exact position within a building and track how long you spend in specific areas.

IP address geolocation is the least precise method but requires no special permissions. Every website you visit can determine your approximate location — usually your city or neighborhood — based on your IP address.

The Location Data Market

Location data has become a multi-billion-dollar industry. Data brokers purchase location information from app developers, advertising networks, and telecom companies, then repackage and sell it to a wide range of buyers.

A single smartphone can generate thousands of location data points per day. When aggregated over weeks or months, this data creates a detailed profile of your daily routines — where you live, where you work, which stores you visit, which doctor you see, and which places of worship you attend.

Major buyers of location data include advertising companies that use it for targeted marketing, hedge funds that analyze foot traffic to predict retail earnings, law enforcement agencies that purchase data to avoid the need for warrants, and insurance companies that assess risk based on where you travel.

In several documented cases, location data sold as "anonymized" was easily re-identified. Researchers have shown that just four location data points are enough to uniquely identify 95% of individuals in a dataset. A home address and a work address alone are usually sufficient to determine someone's identity.

Real Risks of Location Tracking

The consequences of unchecked location tracking extend far beyond targeted advertising.

Stalking and Harassment

Location data in the wrong hands enables stalking. Abusive partners have used shared phone plans, tracking apps, and even photo metadata to monitor victims. In 2023, multiple reports documented cases where data broker information was used to locate individuals who had moved to escape domestic violence.

Government Surveillance

Law enforcement agencies in several countries have purchased commercial location data to track protesters, immigrants, and persons of interest — bypassing the warrant requirements that would normally apply to cell tower data requests. This practice creates a surveillance capability with minimal oversight.

Profiling and Discrimination

Location histories can reveal sensitive information about a person's health conditions, religious beliefs, political affiliations, and personal relationships. This information can be used for discriminatory purposes by employers, insurers, or landlords.

How to Protect Your Location Privacy

Taking control of your location data requires a layered approach across your devices and accounts.

Audit App Permissions

Review which apps have access to your location on both iOS and Android. Set location access to "While Using" rather than "Always" for apps that genuinely need it, and revoke access entirely for apps that do not. Check these permissions regularly, as app updates sometimes reset them.

Strip Photo Metadata

Photos taken with smartphones embed GPS coordinates in their EXIF metadata by default. Before sharing photos online, use our Metadata Remover to strip location data and other identifying information from your images. This prevents anyone who views or downloads your photos from determining where they were taken.

Limit Wi-Fi and Bluetooth Scanning

Disable Wi-Fi and Bluetooth when you are not actively using them. On Android, check for "Wi-Fi scanning" and "Bluetooth scanning" options in your location settings and turn them off. These features allow location tracking even when Wi-Fi and Bluetooth appear to be disabled.

Use a VPN

A VPN masks your IP address, preventing websites from determining your approximate location through IP geolocation. While a VPN does not affect GPS-based tracking, it adds an important layer of privacy for your web browsing activity. Make sure your VPN account is protected with a strong password from our password generator.

Opt Out of Data Broker Listings

Services like data brokers maintain profiles tied to your location history. Submit opt-out requests to major brokers such as Safegraph, Placer.ai, and X-Mode. While this process is tedious, it reduces the availability of your historical location data on the open market.

Disable Location History

Both Google and Apple maintain location history services that record everywhere you go. Disable Google Location History in your Google Account settings and disable Significant Locations on iOS under Privacy and Location Services. Delete any existing history that has already been collected.

Taking Back Control

Location privacy requires ongoing attention rather than a one-time fix. New apps, system updates, and changing default settings can re-enable tracking without your knowledge. Make a habit of auditing your location permissions monthly, stripping metadata from photos before sharing, and staying informed about new tracking technologies as they emerge. Your physical movements are deeply personal information, and protecting them is a fundamental part of maintaining your privacy in the digital age.