If carriers in the developed world are still selling it users location with all the laws they have protecting people privacy what can we say of our local carriers in a world where they hardly follow laws at all…. We are in Big Problem then.
Your location is worth about $300, according to an in-depth study by Motherboard. The website followed a tip and after a convoluted series of events and $300 changing hands, it was able to correctly pinpoint a phone’s location without asking for any consent, because carriers are still selling your location data to “shady” middlemen who resell it under their own policies.
And unlike the debacle in May 2018, when LocationSmart was selling your location to law enforcement, this time it’s being sold to private individuals and businesses.
There’s a thriving economy in selling real-time location info.
Here’s how it worked in this case. For your phone — any phone and not one particular model, make, or one that uses a particular OS — to operate correctly, it has to periodically send a signal that cell towers receive, and they, in turn, send one back. That’s known as “pinging” cell towers and it’s how your phone knows which tower is closest and which to connect with. Your carrier keeps track of these pings, which contain a fairly close approximation of your location.
T-Mobile has an agreement with a company called Zumigo where it sells this location data, complete with a set of rules how it can be used. It so happens that Zumigo is the same company that sold T-Mobile subscriber location data to LocationSmart last May, which caused T-Mobile CEO John Legere to evaluate and pledge to not “sell customer location data to shady middlemen” in response to a Senate inquiry.
Zumigo has a separate contract with other companies that want your location data. One of these companies is Microbilt, which resells it again to other companies and individuals like bounty hunters, debt collectors and even used car salesmen. One of these Microbilt clients obtained the location of the phone in question and then sold it to a private individual, who then sold it again for $300 to Motherboard. If all this makes you dizzy and prone to a headache, you’re not alone.
Posing as potential customers, Motherboard’s investigation found evidence of AT&T, Sprint, and T-Mobile selling customer location data to service companies in the business of reselling it. All three defended the practice, pointing to the agreements each holds with these location aggregate businesses, which state how the data can be used.
After being contacted by Motherboard, each claims to have cut any and all ties to Microbilt until a full investigation can be completed. When trying to obtain location data for a Verizon number, Microbilt was “unwilling or unable” to search for the data, and Verizon did not respond to a request for comment. Microbilt offers customer location tracking for as little as $8.42 when purchasing in bulk, according to documents Motherboard was able to obtain while posing as a customer.
This all points to one of the biggest issues facing us in the future, and that’s how poorly implemented and insecure your carrier’s data privacy measures are. With the current administration at the FCC — which was unable to comment while the offices are closed for the U.S. government shutdown — we don’t see any of this getting better.
At the end of the day, regardless of whatever measures you take to preserve your privacy, your carrier still gives it to anyone with a fistful of money.