{"id":29934,"date":"2020-08-28T15:41:39","date_gmt":"2020-08-28T19:41:39","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=29934"},"modified":"2020-11-27T13:30:15","modified_gmt":"2020-11-27T18:30:15","slug":"governments-buying-phone-location-data","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2020\/08\/28\/governments-buying-phone-location-data\/","title":{"rendered":"Governments Buying Phone Location Data"},"content":{"rendered":"<p><a href=\"https:\/\/www.vice.com\/en_us\/article\/jgxk3g\/secret-service-phone-location-data-babel-street\">Joseph Cox<\/a>:<\/p>\n<blockquote cite=\"https:\/\/www.vice.com\/en_us\/article\/jgxk3g\/secret-service-phone-location-data-babel-street\"><p>In March, <a href=\"https:\/\/www.protocol.com\/government-buying-location-data\">tech publication Protocol reported<\/a> that multiple government agencies signed millions of dollars worth of deals with Babel Street after the company launched its Locate X product. Multiple sources told the site that Locate X tracks the location of devices anonymously, using data harvested by popular apps installed on peoples&rsquo; phones.<\/p><p>[&#8230;]<\/p><p>A <a href=\"https:\/\/www.nytimes.com\/interactive\/2018\/12\/10\/business\/location-data-privacy-apps.html\">myriad of smartphone apps<\/a>, from weather predictors, to games, to flashlights, collect location data. Sometimes this may provide some benefit to the app&rsquo;s operation itself, such as being able to route directions from a users&rsquo; current location, but many of these apps often sell that information as well to data brokers or other companies who incorporate it into their own products.<\/p><p>[&#8230;]<\/p><p>Many agencies have filed so-called reverse location warrants <a href=\"https:\/\/www.forbes.com\/sites\/thomasbrewster\/2019\/12\/11\/google-gives-feds-1500-leads-to-arsonist-smartphones-in-unprecedented-geofence-search\/#7e86957327dc\">to ask Google to hand over information<\/a> on what Android devices were in a particular area at a given time, for example. But an agency does not need to seek a warrant when it simply buys the data instead.<\/p><\/blockquote>\n\n<p><a href=\"https:\/\/twitter.com\/_DanielSinclair\/status\/1295416710535827456\">Daniel Sinclair<\/a>:<\/p>\n<blockquote cite=\"https:\/\/twitter.com\/_DanielSinclair\/status\/1295416710535827456\"><p>Apple needs to open up telemetry to give users control &amp; purview, as well as attack the problem from the other side by creating a separate app review process for SDKs that demands code review and data audits.<\/p><\/blockquote>\n\n<p>I don&rsquo;t know exactly how this would work, but it&rsquo;s a real problem that users have no visibility or control over what happens to their data. Some apps legitimately need location access, and once that&rsquo;s granted there&rsquo;s little that can be done to protect you.<\/p>\n\n<p>Via <a href=\"https:\/\/twitter.com\/DanGrover\/status\/1295431172424491008\">Dan Grover<\/a>:<\/p>\n<blockquote cite=\"https:\/\/twitter.com\/DanGrover\/status\/1295431172424491008\"><p>If Apple&rsquo;s strength is being a walled garden, we might as well demand better walls.<\/p><\/blockquote>\n\n<p>Previously:<\/p>\n<ul>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2020\/08\/20\/weather-apps-after-dark-sky\/\">Weather Apps, After Dark Sky<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2020\/03\/17\/ios-apps-snooping-on-pasteboard-data\/\">iOS Apps Snooping on Pasteboard Data<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2019\/09\/25\/chrome-updater-bug-prevents-macs-from-booting\/\">Chrome Updater Bug Prevents Macs From Booting<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2019\/02\/15\/your-apps-know-where-you-were-last-night\/\">Your Apps Know Where You Were Last Night<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2018\/03\/19\/cambridge-analytica-harvested-50-million-facebook-profiles\/\">Cambridge Analytica Harvested 50 Million Facebook Profiles<\/a><\/li>\n<\/ul>\n\n<p id=\"governments-buying-phone-location-data-update-2020-08-31\">Update (2020-08-31): <a href=\"https:\/\/twitter.com\/rosyna\/status\/1299446644518211584\">Rosyna Keller<\/a>:<\/p>\n<blockquote cite=\"https:\/\/twitter.com\/rosyna\/status\/1299446644518211584\">\n<p>Far less specific location data is a feature of iOS 14&#8230;<\/p>\n<\/blockquote>\n\n<p><a href=\"https:\/\/www.idropnews.com\/news\/what-ios-14s-hidden-approximate-location-feature-is-and-why-its-important\/141938\/\">Tyler Lacoma<\/a>:<\/p>\n<blockquote cite=\"https:\/\/www.idropnews.com\/news\/what-ios-14s-hidden-approximate-location-feature-is-and-why-its-important\/141938\/\"><p>Approximate Location is a new tool that can be enabled in iOS. Instead of switching off location-based data, this feature will make it&#8230;fuzzy. Apple reports that it will limit the location data sent to apps to a general 10-mile region.<\/p><p>[&#8230;]<\/p><p>Not all the details are certain yet, but we do know that apps will be able to track <em>when<\/em> a device moves from one region to another. Apps will probably be able to extrapolate on that data and know that you were somewhere along a particular border between one region and another.<\/p><\/blockquote>\n\n<p id=\"governments-buying-phone-location-data-update-2020-09-07\">Update (2020-09-07): <a href=\"https:\/\/pxlnv.com\/blog\/millions-of-back-doors\/\">Nick Heer<\/a>:<\/p>\n<blockquote cite=\"https:\/\/pxlnv.com\/blog\/millions-of-back-doors\/\">\n<p>Yesterday, the U.S. Court of Appeals for the Ninth Circuit <a href=\"https:\/\/www.businessinsider.com\/nsa-phone-snooping-illegal-court-finds-2020-9\">unanimously confirmed<\/a> that the NSA&rsquo;s bulk collection of Americans&rsquo; phone records was illegal, and found no evidence that it ever found or convicted a single terrorist. But, even if it had helped, the program would still have been illegal because bulk surveillance is antithetical to a healthy democracy. If anything, this decision demonstrated that federal agencies are more constrained than private companies in their ability to collect information like this. That makes sense &mdash; the state should not be spying on citizens &mdash; but Cox&rsquo;s reporting shows that the private sector has provided a convenient workaround.<\/p>\n<\/blockquote>\n\n<p id=\"governments-buying-phone-location-data-update-2020-11-27\">Update (2020-11-27): <a href=\"https:\/\/www.vice.com\/en\/article\/jgqm5x\/us-military-location-data-xmode-locate-x\">Joseph Cox<\/a>:<\/p>\n<blockquote cite=\"https:\/\/www.vice.com\/en\/article\/jgqm5x\/us-military-location-data-xmode-locate-x\">\n<p>A Muslim prayer app with over 98 million downloads is one of the apps connected to a wide-ranging supply chain that sends ordinary people's personal data to brokers, contractors, and the military.<\/p>\n<\/blockquote>","protected":false},"excerpt":{"rendered":"<p>Joseph Cox: In March, tech publication Protocol reported that multiple government agencies signed millions of dollars worth of deals with Babel Street after the company launched its Locate X product. Multiple sources told the site that Locate X tracks the location of devices anonymously, using data harvested by popular apps installed on peoples&rsquo; phones.[&#8230;]A myriad [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"apple_news_api_created_at":"2020-08-28T19:41:42Z","apple_news_api_id":"09a227bc-9cb8-4132-a51f-dd7d94babe0b","apple_news_api_modified_at":"2020-11-27T18:30:19Z","apple_news_api_revision":"AAAAAAAAAAAAAAAAAAAAAw==","apple_news_api_share_url":"https:\/\/apple.news\/ACaInvJy4QTKlH919lLq-Cw","apple_news_coverimage":0,"apple_news_coverimage_caption":"","apple_news_is_hidden":false,"apple_news_is_paid":false,"apple_news_is_preview":false,"apple_news_is_sponsored":false,"apple_news_maturity_rating":"","apple_news_metadata":"\"\"","apple_news_pullquote":"","apple_news_pullquote_position":"","apple_news_slug":"","apple_news_sections":"\"\"","apple_news_suppress_video_url":false,"apple_news_use_image_component":false,"footnotes":""},"categories":[2],"tags":[91,432,31,1667,26,355],"class_list":["post-29934","post","type-post","status-publish","format-standard","hentry","category-technology","tag-appstore","tag-gps","tag-ios","tag-ios-13","tag-iosapp","tag-privacy"],"apple_news_notices":[],"_links":{"self":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/29934","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/comments?post=29934"}],"version-history":[{"count":4,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/29934\/revisions"}],"predecessor-version":[{"id":30849,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/29934\/revisions\/30849"}],"wp:attachment":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/media?parent=29934"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/categories?post=29934"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/tags?post=29934"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}