All About Cookies is an independent, advertising-supported website. Some of the offers that appear on this site are from third-party advertisers from which All About Cookies receives compensation. This compensation may impact how and where products appear on this site (including, for example, the order in which they appear).
All About Cookies does not include all financial or credit offers that might be available to consumers nor do we include all companies or all available products. Information is accurate as of the publishing date and has not been provided or endorsed by the advertiser.
The All About Cookies editorial team strives to provide accurate, in-depth information and reviews to help you, our reader, make online privacy decisions with confidence. Here's what you can expect from us:
- All About Cookies makes money when you click the links on our site to some of the products and offers that we mention. These partnerships do not influence our opinions or recommendations. Read more about how we make money.
- Partners are not able to review or request changes to our content except for compliance reasons.
- We aim to make sure everything on our site is up-to-date and accurate as of the publishing date, but we cannot guarantee we haven't missed something. It's your responsibility to double-check all information before making any decision. If you spot something that looks wrong, please let us know.
A weather app asks for your location so it can show you the forecast. If that location makes its way into the advertising market, it could also help police figure out where you live.
A Nov. 5 Bloomberg investigation highlighted Webloc, a tool sold by surveillance vendor Penlink that lets police search phone location data collected through advertising technology used in everyday apps, including weather apps and games.[1]
How to limit location tracking on iPhone and Android
How can police track a phone through ads?
Some apps share location data with advertising companies. Those records can pair a set of coordinates and a timestamp with an advertising ID, a code that helps companies recognize the same device across apps. Data brokers and other companies can collect and resell those records.
Investigators using Webloc can search for devices that appeared in an area at a particular time and then look up where else those devices have been. Documents reviewed by the University of Toronto’s Citizen Lab described access to records from up to 500 million devices worldwide, with up to three years of location history.
A record can be revealing even without a name. In Tucson, Arizona, police described using Webloc to identify where a person and his partner lived and worked. Think about what a week of your own location history could show, from where you spend the night to which clinic you visit.
In June, the Bureau of Alcohol, Tobacco, Firearms and Explosives canceled its Webloc contract after lawmakers questioned its use of commercial location data. Citizen Lab separately identified Webloc customers at the federal, state, and local levels.
How to limit location tracking on iPhone and Android
Start with the apps that have access to your location. If you only need a forecast for your city, try entering it manually and turning off location access. For apps that do need your location, like maps, consider allowing it only while you’re using the app.
- iPhone: Go to Settings > Privacy & Security > Location Services and select an app. Choose Never or While Using the App. If the app only needs your general area, turn off Precise Location. For more controls, see our guide to iPhone privacy settings.
- Android: Go to Settings > Location > App location permissions and select an app. Choose Don’t allow, Ask every time, or Allow only while using the app. Turn off Use precise location where you can. Menu names can vary by phone. See our guide to managing location access on Android.
Then check your ad settings. On iPhone, go to Settings > Privacy & Security > Tracking and turn off Allow Apps to Request to Track. On Android, search Settings for Delete advertising ID. The California Privacy Protection Agency’s mobile tracking guide also explains how to request deletion of precise location data from brokers.
Changing these settings limits what apps can collect going forward. Any location records already held by a data broker are a separate matter.