Your Phone Knows Where You Sleep: The Shadow Economy Selling Your Every Move

Imagine someone following you around all day, every day — noting when you leave the house, which gym you visit, how long you spend at your doctor's office, and whether you stopped at a particular church or political rally on the way home. Now imagine that person selling that information to dozens of companies you've never heard of, who then resell it to dozens more.

That's not a hypothetical. That's Tuesday.

Welcome to the location data economy — a sprawling, largely invisible marketplace where your physical movements are the product, and you're almost certainly not the one getting paid.

How Location Data Gets Collected in the First Place

Most people assume that turning off location services in their phone's settings is enough to stop the tracking. It helps, but it's far from a complete solution.

Your smartphone has multiple ways to figure out where you are. GPS is the obvious one, but cell tower triangulation, Wi-Fi positioning, and Bluetooth beacon signals can all place you within a surprisingly tight radius even when GPS is disabled. Apps that have been granted network access — which is almost all of them — can infer your location through IP geolocation. And if you're using a fitness tracker, a smart watch, or a connected car, you've got additional data streams flowing that most people never think about.

The really uncomfortable part is how this data leaves your device. Many apps — weather apps, games, coupon apps, even flashlight apps — include third-party software development kits (SDKs) that quietly harvest location data in the background and beam it to data brokers. You agreed to this in the terms of service, technically. But let's be real: nobody reads those.

Meet the Data Brokers You've Never Heard Of

Companies like Veraset, Safegraph, X-Mode (now Outlogic), and Placer.ai sit at the center of this ecosystem. They aggregate location data from hundreds of app partners, clean it up, and sell it to clients ranging from retail chains analyzing foot traffic to hedge funds tracking which stores are busy before earnings calls.

But the buyer list gets more unsettling. Investigative reporting over the past few years has revealed that US federal agencies — including immigration enforcement and military intelligence units — have purchased location data from commercial brokers specifically to sidestep the warrant requirements that would normally apply to government surveillance. State and local law enforcement agencies have done the same.

The legal justification is a loophole: if a private company collected the data voluntarily (in theory) and sold it on the open market, the government can just buy it like any other customer. No judge, no warrant, no probable cause required.

The Carrier Problem Nobody Talks About

Your wireless carrier — whether that's AT&T, Verizon, T-Mobile, or a regional provider — has access to your location data that makes app-level tracking look amateur. Because your phone must constantly communicate with cell towers to maintain service, carriers have a continuous, highly accurate record of your physical location that doesn't depend on any app permissions at all.

In 2019, a major FCC investigation found that all four major US carriers were selling customer location data to third-party aggregators without meaningful consent. The FCC eventually issued fines, but critics pointed out that the penalties were a rounding error compared to the revenue involved, and the practice largely continued in various forms.

If you're on a major carrier, there are opt-out settings buried in your account preferences — but they're not always easy to find, and their effectiveness isn't guaranteed. Verizon's privacy dashboard, AT&T's privacy choices portal, and T-Mobile's ad settings are worth visiting, even if the experience is deliberately friction-filled.

When 'Anonymized' Data Isn't Anonymous

The industry's standard defense is that location data is anonymized — stripped of names and personal identifiers before it's sold. This sounds reassuring until you understand how trivial it is to re-identify people from movement patterns alone.

Researchers at MIT demonstrated years ago that just four location data points are enough to uniquely identify 95% of individuals in a dataset. Think about your own daily pattern: home, workplace, gym, favorite lunch spot. That combination is essentially a fingerprint. Anyone with access to the raw data and a little context — say, a public social media profile that mentions your employer — can connect the dots in minutes.

So when a data broker says your information is anonymized, what they really mean is that your name isn't attached to it. Your identity very much is.

Practical Steps to Reduce Your Location Exposure

You can't completely disappear from this ecosystem without ditching your smartphone entirely — which isn't realistic advice for most people. But you can meaningfully reduce your footprint.

Audit your app permissions aggressively. Go into your phone's settings right now and look at which apps have location access. For iOS, check Settings > Privacy & Security > Location Services. For Android, it's Settings > Location > App permissions. Revoke access for anything that doesn't genuinely need it to function. A recipe app does not need to know where you are.

Set location to 'While Using' rather than 'Always.' For apps that legitimately need location — navigation, ride-sharing — restrict them to only accessing your location when the app is open and visible. Background location access is where most of the passive tracking happens.

Disable advertising IDs. Both iOS and Android allow you to limit ad tracking or reset your advertising identifier, which is one of the primary hooks data brokers use to stitch your location history together across apps.

Use a VPN consistently. While a VPN won't block GPS-based location data, it masks your IP address — eliminating one of the easier methods apps use to infer your location when other signals aren't available. It also encrypts your traffic on public Wi-Fi networks, preventing passive monitoring of the apps and services you're accessing.

Be selective about fitness and wearable devices. Fitness trackers and smartwatches generate continuous, highly detailed location histories. Review the privacy settings on any associated apps and be cautious about which third parties those platforms share data with.

The Bigger Picture

Location data is intimate in a way that most other personal information isn't. It reveals your relationships, your health decisions, your political and religious activities, and your daily routines with a level of detail that even close friends might not know. The fact that this information is flowing through a commercial ecosystem with minimal oversight or consent should concern everyone — regardless of whether you have anything to hide.

Privacy isn't about secrecy. It's about control. And right now, most Americans have very little of it when it comes to where they go and who knows about it.

The good news is that small, consistent choices — smarter app permissions, a reliable VPN, and some skepticism toward the services asking for your location — add up to a meaningfully more private life. You can't shut down the entire data broker industry from your phone settings, but you can make yourself a much less interesting target.