Skip to main content

Feds are tracking phone locations with data bought from brokers

Feds are tracking phone locations with data bought from brokers


Documents obtained by the ACLU show how often federal agencies buy sensitive data from third parties

Share this story

Photo by Amelia Holowaty Krales / The Verge

The Department of Homeland Security (DHS) has been buying location data from third parties to sidestep the traditional warrant process, according to new documents released by the American Civil Liberties Union (ACLU).

The documents show that agencies like Customs and Border Protection (CBP) and Immigration and Customs Enforcement (ICE) were able to purchase vast amounts of this location data without any judicial oversight and use it to track the movements of millions of cellphones within the US.

Generally, obtaining data about domestic communications directly from the providers (i.e., telecom companies) requires a warrant, which must be approved by a judge. But purchasing data from intermediary organizations is not subject to the same constraints and effectively gives law enforcement agencies carte blanche to gather personal data that they would not otherwise be able to access.

Agencies like ICE were able to purchase vast amounts of this location data without any judicial oversight and use it to track the movements of millions of cellphones within the US

The volume of location data disclosed in the newly released documents is huge and points toward an even greater level of data acquisition being carried out by the agencies concerned. The documents were obtained by the ACLU under freedom of information laws after a lawsuit was filed in 2020, following reporting by The Wall Street Journal that uncovered the purchase of commercial location data by government agencies.

Some of the records released to the ACLU included a set of spreadsheets containing a subset of location data purchased by CBP from the data broker Venntel. Per the ACLU’s analysis, for one three-day span in 2018, the records contain around 113,654 location points — equalling more than 26 location points recorded per minute. But even this data is confined to one geographic area in the Southwest, suggesting it’s only a fraction of the total volume of location data that federal agencies obtained.

As reported by Politico, in emails between Venntel and ICE, the data broker claimed to collect location data from more than 250 million mobile devices and process over 15 billion location data points per day.

Another data broker identified in the documents is Babel Street. Like Venntel, Babel Street obtains location data by paying developers to include snippets of its code in other mobile apps, which — largely unknown to users — transmit data back to the company’s servers. In 2021, Motherboard reported that Venntel had a contract with the Florida Department of Corrections to provide information on any cellphones that were near state-owned prisons.

In a statement, Nathan Freed Wessler, deputy director of ACLU’s Speech, Privacy, and Technology Project, said that data brokers brought a new threat to privacy and, as such, should be regulated by the government.

“With the potential for abuse so high, Congress must step in to definitively end this practice.”

“The Supreme Court has made clear that because our cell phone location history reveals so many ‘privacies of life,’ it is deserving of full Fourth Amendment protection,” Wessler said. “Yet, here we see data brokers and government agencies tying themselves in knots trying to explain how people can lack an expectation of privacy in such obviously personal and sensitive location information. With the potential for abuse so high, Congress must step in to definitively end this practice.”

In fact, Congress will have a chance to step in shortly. On Tuesday, the House Judiciary Committee will hold a hearing on “digital dragnets” and the government’s access to sensitive data. Sen. Elizabeth Warren (D-MA) had previously proposed a bill that would bar data brokers from selling location or health data entirely.

Today’s Storystream

Feed refreshed 60 minutes ago The tablet didn’t call that play by itself

Emma Roth60 minutes ago
Missing classic Mario?

One fan, who goes by the name Metroid Mike 64 on Twitter, just built a full-on 2D Mario game inside Super Mario Maker 2 complete with 40 levels and eight worlds.

Looking at the gameplay shared on Twitter is enough to make me want to break out my SNES, or at least buy Super Mario Maker 2 so I can play this epic retro revamp.

External Link
Russell BrandomAn hour ago
The US might still force TikTok into a data security deal with Oracle.

The New York Times says the White House is still working on TikTok’s Trump-era data security deal, which has been in a weird limbo for nearly two years now. The terms are basically the same: Oracle plays babysitter but the app doesn’t get banned. Maybe it will happen now, though?

Richard LawlerAn hour ago
Don’t miss this dive into Guillermo del Toro’s stop-motion Pinocchio flick.

Andrew Webster and Charles Pulliam-Moore covered Netflix’s Tudum reveals (yes, it’s going to keep using that brand name) over the weekend as the streamer showed off things that haven’t been canceled yet.

Beyond The Way of the Househusband season two news and timing information about two The Witcher projects, you should make time for this incredible behind-the-scenes video showing the process of making Pinocchio.

External Link
Russell Brandom4:29 PM UTC
Edward Snowden has been granted Russian citizenship.

The NSA whistleblower has been living in Russia for the 9 years — first as a refugee, then on a series of temporary residency permits. He applied for Russian citizenship in November 2020, but has said he won’t renounce his status as a U.S. citizen.

External Link
Emma Roth4:13 PM UTC
Netflix’s gaming bet gets even bigger.

Even though fewer than one percent of Netflix subscribers have tried its mobile games, Netflix just opened up another studio in Finland after acquiring the Helsinki-based Next Games earlier this year.

The former vice president of Zynga Games, Marko Lastikka, will serve as the studio director. His track record includes working on SimCity BuildIt for EA and FarmVille 3.

External Link
Andrew J. Hawkins3:37 PM UTC
Vietnam’s EV aspirant is giving big Potemkin village vibes

Idle equipment, absent workers, deserted villages, an empty swimming pool. VinFast is Vietnam’s answer to Tesla, with the goal of making 1 million EVs in the next 5-6 years to sell to customers US, Canada and Europe. With these lofty goals, the company invited a bunch of social media influencers, as well as some auto journalists, on a “a four-day, multicity extravaganza” that seemed more weird than convincing, according to Bloomberg.

James Vincent3:17 PM UTC
Today, 39 years ago, the world didn’t end.

And it’s thanks to one man: Stanislav Petrov, a USSR military officer who, on September 26th, 1983, took the decision not to launch a retaliatory nuclear attack against the US. Petrov correctly guessed that satellite readings showing inbound nukes were faulty, and so likely saved the world from nuclear war. As journalist Tom Chivers put it on Twitter, “Happy Stanislav Petrov Day to those who celebrate!” Read more about Petrov’s life here.

Soviet Colonel who prevented 1983 nuclear response
Photo by Scott Peterson/Getty Images
The Verge
James Vincent3:03 PM UTC
Deepfakes were made for Disney.

You might have seen the news this weekend that the voice of James Earl Jones is being cloned using AI so his performance as Darth Vader in Star Wars can live on forever.

Reading the story, it struck me how perfect deepfakes are for Disney — a company that profits from original characters, fans' nostalgia, and an uncanny ability to twist copyright law to its liking. And now, with deepfakes, Disney’s most iconic performances will live on forever, ensuring the magic never dies.

External Link
Elizabeth Lopatto2:41 PM UTC
Hurricane Fiona ratcheted up tensions about crypto bros in Puerto Rico.

“An official emergency has been declared, which means in the tax program, your physical presence time is suspended,” a crypto investor posted on TikTok. “So I am headed out of the island.” Perhaps predictably, locals are furious.

The Verge
Richard Lawler2:09 PM UTC
Teen hacking suspect linked to GTA 6 leak and Uber security breach charged in London.

City of London police tweeted Saturday that the teenager arrested on suspicion of hacking has been charged with “two counts of breach of bail conditions and two counts of computer misuse.”

They haven’t confirmed any connection with the GTA 6 leak or Uber hack, but the details line up with those incidents, as well as a suspect arrested this spring for the Lapsus$ breaches.

David Pierce12:54 PM UTC
Thousands and thousands of reasons people love Android.

“Android fans, what are the primary reasons why you will never ever switch to an iPhone?” That question led to almost 30,000 comments so far, and was for a while the most popular thing on Reddit. It’s a totally fascinating peek into the platform wars, and I’ve spent way too much time reading through it. I also laughed hard at “I can turn my text bubbles to any color I like.”

Thomas Ricker10:44 AM UTC
The Simpsons pays tribute to Chrome’s dino game.

Season 34 of The Simpsons kicked off on Sunday night with an opening credits “couch gag” based on the offline dino game from Google’s Chrome browser. Cactus, cactus, couch, d’oh! Perfect.