TI-2026-061D — The Anonymized Lie

Classification: HIGH · Mass Location Surveillance · Data Brokerage / Warrantless Tracking Confidence: HIGH on the facts (FTC orders, named reporting, the Carpenter holding — all public record); the argument is that "advertising data" is the label under which warrantless population tracking is sold. TLP:WHITE — public companies, public regulatory orders, published reporting. Series: The Fake Umbrella — Part D. D is for Data broker. The word is "analytics." The product is you, at every hour, for sale by the row. Facts are facts. They are good for some and bad for others. You decide.

The seed: a prayer app becomes a military dataset

Muslim Pro is a prayer-times app. It tells you when to pray and which way is Mecca; roughly 98 million people have installed it. In November 2020, Motherboard reported that a data broker called X-Mode was collecting its users' precise location and selling it down a chain that ended at US military contractors. The faithful, checking the time of the next prayer, were — without any comprehension of it — generating a targeting-grade location feed for the armed forces of a foreign country.

Sit with the ordinariness of that. Not a spyware implant. Not a cracked phone. Just an app, a permission dialog no one reads, and a business model. The most invasive surveillance in this series so far needed a scanner (061A), an exploit market (061B), or a police evidence room (061C). This one needed only an advertisement. The single most euphemistic word in the entire fake umbrella is doing the work here: analytics. Under it, the movements of a billion people are packaged, priced, and — the part that matters — sold to the government to do what the Constitution says needs a warrant.

Who these firms are — and the word that hides them

They do not call themselves surveillance companies. They call themselves "location analytics," "audience insights," "places data," "human-movement intelligence." A partial roll of the ones that got caught:

The raw material is the same for all of them: the real-time-bidding (RTB) bidstream. Every programmatic ad you are served broadcasts your location, device and interests to hundreds of potential bidders at once. Most lose the auction — and keep the data anyway. The Irish Council for Civil Liberties calls RTB one of the largest data leaks in existence, billions of broadcasts a day. The brokers stand at the drain of that flood, scoop it, and resell it as "insights." You were never the customer of the ad. You were the inventory.

The move: buying your way around the Fourth Amendment

Here is the load-bearing fact, and it is a legal one. In Carpenter v. United States (2018), the US Supreme Court held that when the government obtains your historical cell-site location, that is a search — it needs a warrant. The location-data-broker market is the deliberate, engineered answer to that ruling.

The agencies' theory is breathtaking in its simplicity: Carpenter says you need a warrant to compel the data from the carrier. It says nothing about buying the same data from a broker on the open market. So we'll buy it. DHS, ICE, CBP and the IRS did exactly that through Venntel — purchasing the location trails of people inside the United States and using them for immigration enforcement, with no warrant, because the data came with an invoice instead of a subpoena. Local police did it through Fog Reveal for a few thousand dollars a year. This is not a loophole they stumbled into. It is the product's core value proposition: we are how you get the location data the Constitution otherwise puts behind a judge.

The two lies the industry is built on

Every location broker rests on two assurances. Both are false, and one of them the FTC has now formally called false.

Lie #1 — "It's anonymized and aggregated." A location trail is the opposite of anonymous. The device that sleeps at one address every night and sits at one office every weekday is not a data point — it is a named human being, trivially. Add a visit to a specific clinic, a specific mosque, a specific lawyer, and you have not just their identity but their secrets. "Anonymized location data" is a contradiction in terms, and SafeGraph selling who visited Planned Parenthood proves the aggregation dissolves the instant anyone wants a name.

Lie #2 — "Users consented." The consent lives in the 4,000-word terms of a flashlight app, a weather widget, a prayer-times tool — accepted by a thumb, never read, never comprehended. No one who tapped "Agree" to see tomorrow's forecast knowingly agreed to sell their abortion-clinic visit to a defense contractor. The FTC agreed: its first-ever data-broker ban (X-Mode/Outlogic, January 2024) and its December 2024 order against Gravy/Venntel both rest on the finding that this "consent" was not consent and the sale of sensitive-location data was unlawful. The critique is no longer an opinion. It is a regulator's holding.

The seven questions

Who is this? Commercial location-data brokers — Venntel/Gravy, X-Mode/Outlogic, SafeGraph, Fog, Babel Street — reselling phone-GPS harvested from the ad bidstream.

Why did it attack? No "attack" — a sale. The movements of the population are the merchandise; the buyers are advertisers and, quietly, governments.

Who does it claim to be? Marketing-analytics and "audience insights" companies. Ad-tech, not spyware. The friendliest possible face on the most total possible dataset.

Whom is it related to? The RTB ad-exchange ecosystem upstream; ICE/CBP/DHS, local police and the US military downstream; and the broader surveillance market (039B) whose civilian tributary this is.

Where is the money? Both ends: advertisers pay to target you, and governments pay to track you — the same feed sold twice, once as marketing, once as intelligence. Fog Reveal went to police for a few thousand a year; SafeGraph sold clinic-visit data for ~$160.

What is the official anchor? Legality-by-euphemism: "commercially available information" is treated as outside Carpenter, so no warrant, no court, no oversight — until the FTC intervened.

What if it is not who it claims? It is exactly who it claims: an ad-data company. The finding is that an ad-data company, at this scale, is a warrantless national location-surveillance system with a marketing brochure stapled to the front.

What if…

• What if it really is just for ad targeting? Then explain the invoices to ICE, CBP, the IRS, the military and local police. A dataset that is "just advertising" does not keep ending up in the hands of the people who arrest, deport, and investigate. The buyer list is the rebuttal.
• What if aggregation protects individuals? SafeGraph's Planned-Parenthood product and Fog's individual "pattern of life" tracking show aggregation is a setting, not a safeguard — dialled down to one person the moment a customer wants one.
• What if users can just opt out? The opt-out is unfindable, per-app, per-broker, and does not reach the bidstream broadcasts already scooped. A right that requires you to individually defeat hundreds of invisible intermediaries is not a right; it is a decoration.

Steelman: the strongest defence — and why it fails

Built at full strength:

"This is lawful, consented advertising infrastructure. Users agree to app terms; data is aggregated and de-identified; brokers sell 'insights,' not names. Agencies buy only commercially-available information, which courts have not held to require a warrant. Location analytics powers navigation, retail, disaster response and public health. Banning it breaks the free ad-supported internet."

Where it breaks:

• "Consented and de-identified" is precisely what the FTC ruled it was not. Two binding 2024 orders found the consent invalid and the data sensitive and identifiable. You cannot steelman with the exact claims a regulator has already struck down.
• "Commercially available, so no warrant" is the whole abuse, stated as a defence. It concedes that the point is to obtain, by purchase, the data Carpenter puts behind a warrant. "It's legal because we found a way around the Constitution" is the indictment.
• "Aggregated insights, not names" collapses on demand. The Planned Parenthood dataset was the names-in-effect — who came, from where, for how long. Aggregation that de-aggregates for $160 was never protection.
• The one true thing: genuine, consented, actually-aggregated mobility data has real public value — pandemic response, transit planning, disaster logistics. That legitimate use exists, and it is the fig leaf. It does not license a bidstream-fed, government-supplying, individually-resolvable tracking market that the FTC has twice ruled unlawful.

Verdict: consented, aggregated mobility analytics for public benefit is legitimate. The actual industry — RTB-harvested, falsely "anonymized," dark-pattern "consented," sold to ICE and police and the military as a warrant workaround — is HIGH, and now formally unlawful in its sensitive-data form. "Analytics" is not a mitigation. It is the marketing name of the surveillance. Confidence: HIGH; two of the named brokers are under binding FTC orders that make the finding the regulator's, not merely ours.

Read between the lines

The genius of this corner of the umbrella is that it never had to break into anything. NSO builds exploits; Cellebrite cracks the phone; these firms just bought the exhaust of the ad economy and noticed the government would pay for it. The surveillance was a byproduct they learned to sell — which is why it wears the most innocent label in the whole series. Nobody is scared of "audience insights." That is the point. The word was chosen so that a system tracking a billion people's visits to clinics and mosques would file, in the public mind, next to loyalty cards and banner ads.

And read what the FTC orders really say between the lines: the enforcement came in 2024 — years after WSJ (2020) and Vice (2020) exposed it. The market ran, openly and profitably, selling Americans' movements to their own government, for the entire gap between the exposure and the rule. As with Cellebrite's cutoffs, the accountability arrived after the harm was already national — and only for the specific brokers unlucky enough to be named.

The human layer

A woman drives to a clinic. She tells no one. She has a weather app on her phone, because everyone has a weather app. That app carried an SDK; the SDK put her coordinates on the bidstream; a broker scooped the losing bid; the broker sold "visitors to reproductive-health locations" as a product; and somewhere a buyer — a marketer, a police department, an activist group, a hostile ex with money — can now know she went, when, from where, and where she drove afterward. She consented to none of it, in the sense any human means by consent. She agreed to see the weather. The dossier the world can now assemble about the most private hour of her life was built entirely from the ambient assumption that checking the forecast is free. It was never free. She was the price.

Defense — name the euphemism, close the loophole

(1) For readers: translate on sight. "Location analytics / audience insights / places data" = a company that sells where you go. Refuse the soft word; use the real one. (2) For your phone: deny location to everything that does not strictly need it, reset your advertising ID often, and assume any "free" app funded by ads is a sensor. (3) For technologists: the bidstream is the leak — support RTB reform and on-device processing; a datum never broadcast cannot be resold. (4) For policymakers: the fix is precise and known — close the "commercially available information" carve-out so the government cannot buy what Carpenter says it must get a warrant for. The FTC opened the door with X-Mode and Venntel; legislation (a real "Fourth Amendment Is Not For Sale" rule) walks through it.

Investigation metadata

Next — TI-2026-061E: E is for "Ethical hacker" — the certification mills and penetration-testing industry that trademarked the word "ethical," and how the same "authorized assessment" toolchain becomes the reconnaissance layer for everyone else.

They didn't hack your phone. They didn't need to. They bought the trail it leaves for the price of a banner ad, called it "analytics," and sold it to the people who arrest, deport, and investigate — the one dataset the Constitution tried to put behind a judge, moved to a checkout instead. "Anonymized" was the lie that made it sound safe. You were always the name in the data. Facts are facts. They are good for some and bad for others. You decide.