Investigation Finds Google Collected Location Data Even With Location Services Turned Off

from the questionable-practice-raises-Fourth-Amendment-questions dept

What if you take every precaution you can possibly take to avoid leaving a digital trail of your movements… and it still doesn’t matter?

Many people realize that smartphones track their locations. But what if you actively turn off location services, haven’t used any apps, and haven’t even inserted a carrier SIM card?

Even if you take all of those precautions, phones running Android software gather data about your location and send it back to Google when they’re connected to the internet, a Quartz investigation has revealed.

Since the beginning of 2017, Android phones have been collecting the addresses of nearby cellular towers—even when location services are disabled—and sending that data back to Google.

So much for going off the grid. There are some caveats to Google’s permissionless collection of cell site location data, with the most significant being the fact Google didn’t store the auto-collected cell tower info. That doesn’t excuse the practice, but it at least keeps it from becoming tracking data the government can access without a warrant.

Google’s collection of cell tower data occurred when notifications were pushed or phone users utilized the phone’s built-in messaging service. In both cases, it’s reasonable to assume users weren’t expecting Google to be collecting this data. (It wouldn’t be necessarily reasonable to assume cell providers weren’t, as that’s what’s needed to deliver messages and notifications if the user isn’t using a WiFi connection.) But no one would reasonably assume the operating system would still send cell tower info to Google with the SIM card pulled.

This is a troubling practice to be engaged in, no matter how temporary the storage of cell site data. It flies directly in the face of what phone users expect when they shut off location services or undertake other affirmative actions to minimize their digital footprint.

SIDEBAR:

This does raise some interesting Fourth Amendment questions, even if the circumstances under which the collection occurred make it unlikely these factors will ever be the centerpiece of a motion to suppress evidence. US courts have made it clear on multiple occasions there’s no expectation of privacy in cell site location records. Judges have stated cell phone users should know cell companies collect tower location data to provide service to their phones. According to this line of thinking, the third party location records have no expectation of privacy because phone users are aware of the realities of cell phone usage: phones connect to towers and create records of the tower’s location.

The question in this case would be whether the expectation of privacy is still nonexistent when phone users undertake deliberate efforts to disable the collection of location records. It would seem these efforts would restore an expectation of privacy — at least if judges are going to be consistent and intellectually honest. As some judges have pointed out, defendants who don’t like being tracked by their cell phones can just not use them. (This is still a somewhat ridiculous assertion — roughly comparable to the TSA suggesting people who don’t like invasive searches/biometric data gathering can just choose to not fly. Both ignore the realities of the modern world.)

If a person makes efforts to prevent collection of location info and a company does it anyway, should law enforcement still have warrantless access to these records? This remains a hypothetical question, but given the amount of surreptitious tracking performed by a number of tech companies (providers, ad networks, etc.), it won’t remain hypothetical forever.

Phones generate a wealth of third party records just a subpoena away from being in the government’s possession. Users cannot possibly be aware of all the information gathered by multiple companies each time they use their smartphone, but they do “reasonably expect” shutting off location services means no one (outside of their service provider) will be gathering location data. Would someone, in performing these actions, be granted a higher expectation of privacy as a result of their actions? Or would a court treat savvier digital natives the way it treats the unwashed masses who make zero effort to limit collection of location info?

Filed Under: , , , ,
Companies: google

Rate this comment as insightful
Rate this comment as funny
You have rated this comment as insightful
You have rated this comment as funny
Flag this comment as abusive/trolling/spam
You have flagged this comment
The first word has already been claimed
The last word has already been claimed
Insightful Lightbulb icon Funny Laughing icon Abusive/trolling/spam Flag icon Insightful badge Lightbulb icon Funny badge Laughing icon Comments icon

Comments on “Investigation Finds Google Collected Location Data Even With Location Services Turned Off”

Subscribe: RSS Leave a comment
37 Comments
Anonymous Coward says:

It is still possible to not use a cell phone

Everyone seems to forget about the possibility, but cell phones are not required to live in the modern world. Yes they make thing more convenient, but they make collecting information on you just as easy. Your digital footprint grows year by year and most of us are wholeheartedly helping it do so.

Zgaidin (profile) says:

Re: Re: Re: It is still possible to not use a cell phone

His response could have been phrased better, certainly, but there’s no denying that even if, cellular devices aren’t fundamentally required at this point for everyone, the number of people for whom they are required (for work if nothing else) increases year by year. Sure, maybe you, personally, can avoid cell communication right now. Maybe you’ll even be one of the last holdouts that doesn’t need it, but the genie is out of the bottle, so to speak. Companies and entities, both those you work for and those you do business with, are going to continue finding ways to leverage the technology and at some point even if a few people can avoid using it, most people will not be able to do so, even if they so desired. So, saying “you don’t have to use the devices” isn’t a particularly valid long-term solution. They’re more necessary today than they were yesterday, and will be more necessary still tomorrow.

Machin Shin says:

Re: It is still possible to not use a cell phone

Yeah….. Cell phones are not required…. Except by an extremely large percentage of jobs. I am required to have one for my job.

I was about to say “sure I could go work for a farmer and not have one” but then I realized even most farmers would expect you to have a cell phone so they could reach you.

So I guess maybe there are some of these almost mythical jobs where you can get by without them. I am betting they are not that great though. I sure can’t think of any good paying job that wouldn’t expect you to have a cell.

Anonymous Coward says:

Re: Re: It is still possible to not use a cell phone

The old bricks are still available and limit your data points very well. Certainly no Google involved. Or do it like Stallmann and use a pager 🙂 Though maybe that’s even too inconvenient for him and he was just joking when he proposed it in a talk.

Anonymous Coward says:

Re: Re: Re: It is still possible to not use a cell phone

Found it: https://interviews.slashdot.org/story/14/05/05/2012218/richard-stallman-answers-your-questions

Following is the relevant excerpt:

Cell phones
by Anonymous Coward [not me, certainly]

I read a little on your website about your take on technology that uses non-free software. Do you still not own a cell phone?

RMS: I certainly do not! A cell phone is Stalin’s dream: its movements are tracked, and it can be converted (through the universal back door) into a listening device.

AC: If not, I’d love to hear your perspective on life without one these days, where its just assumed that people own one.

RMS: Please help teach everyone that this assumption is false!

There is a way to make a cell phone acceptable for occasional communication only: put a one-way pager in the phone, so people can page you if they are trying to reach you. That way, you can keep its radio connection off most of the time. When you get the page, you can decide when and where to reveal your location by connecting the phone to the network.

Of course, the software in the phone’s main computer should also be free, but that is a separate issue. In other words, nonfree software in that computer is one assault on your freedom, and the phone system’s location tracking is another.

The software in the baseband (phone radio modem) processor can’t be free, at least not as things stand now. So the phone needs to be designed so the baseband processor can’t talk to anything (peripherals, antenna, etc) unless the main processor permits it, and so that the baseband processor can’t change the software in the main processor. Ideally the software in the baseband processor should be immutable, so we can treat it as a circuit.

Uriel-238 (profile) says:

Re: big, powerful centralized government...

Is necessary to sustain that big honkin’ military that the US loves to throw around. It also helps a great deal with large scale services like water and power.

And then, if we downsize our government, expect the military or corporations to take over, and they’ll run things, only they won’t even pretend to have public interest at heart.

You know, you could go to Namibia and join the San. They have about the size of government you might find suitable.

Anonymous Coward says:

Re: Re: big, powerful centralized government...

No, I prefer to wait for the socialist and communist overlords like the Democrats wan to bring in. You know, like Lenin, Stalin, Mao, Hitler. The ones that put 100 million people in the ground. That is exactly what we will have if the Dems get their way. Just look at their violence after losing an election. Dissent cannot be tolerated.

Wendy Cockcroft (user link) says:

Re: Re: Re:2 big, powerful centralized government...

Extremists rely on boogeyman politics to get support for their nonsense. People who allow themselves to be easily riled up when the dog whistle blows have only themselves to blame when the lunatics take over the asylum.

Smart people keep a level head and weigh policies on their own merits based on the results when they’re enacted in real life. It’s what conservatives used to do, and they need to get back to it, stat.

Uriel-238 (profile) says:

Re: Re: Re: big, powerful centralized government...

Anonymous Coward, you sound like the officers from the Nazi party who argue how dull and primitive the Jews are. I’d advise that you stop going to your rally meetings and do some actual studying of who believes what.

Hitler was a fascist, and based his rule off Mussolini’s fascism and culture-of-personality. The same devices Stalin used, but I’m getting ahead of myself.

The USSR never became a true Communist state, but was started as a temporary authoritarian regime. Eventually (hypothetically) the politburo would have been disbanded and the people would have decided everything. Of course, that never happened. But Lennin and Stalin were both authoritarians not above purging dissenters.

2017 Democrats are like 2017 Republicans, corporatist. The difference is in their method: Democrats appeal to the people, preaching equality, and occasionally throwing the people a bone, where the Republican party looks for ways to exploit the system to reduce the power of the vot. Among their current tactics, they engage in nationwide gerrymandering, voter suppression, and demagogy in order to secure elections.

GOP tactics belie the pretense that they could not win elections by the merits of their actual policies (when they have policies, nowadays they want to just undo what the last guy did), so they have to rely on subterfuge to secure their power. This suggests it’s the Republicans who are more authoritarian than the Democrats.

The DNC, granted, is still corporatist. And it’s still awful and subject to what its campaign contributors want, but it takes profound skill to be even worse then them. The RNC has managed to do just that.

Getting back to big government, we like clean meat. We like well-paved roads. We like working mail. We like a robust military. We like power and water and internet we can rely on. We like benefit programs for our infirm and disabled and those who’ve been too injured to work. All these things require big government. The only argument for small government, really is to eliminate those parts a given citizen doesn’t personally benefit from. But that’s ridiculous.

And no, it doesn’t lead to authoritarianism. In fact, our government is bigger for having parliaments and committees making decisions rather than a unilateral heirarchy, which serves as a defense mechanism against corruption.

Anonymous Coward, Maybe you should consider a political science course?

benoliver999 (profile) says:

I guess the only way around this is not to install Google Apps, which is become more and more viable, but is still a PITA.

The truly paranoid just shouldn’t use a phone I suppose.

Interesting that they used their GCM push notification service to send this data – ‘secure’ messaging app Signal requires this to be installed to work and loads of people were up in arms about it. I guess they were right – don’t trust google!

Anonymous Coward says:

Re: Re:

I guess you are arguing it’s a pain in the ass in the sense of regular ass cramps, though I would argue it’s more like itching hemorrhoids every now and then, as in: tolerable.

On my phone I don’t have the Google blob installed, and I’m rather content with the situation. F-Droid just recently gained automated updates and a new slick user interface. It’s harder to get certain free applications: the Signal developers insist to be the only one to build the apk. VLC is constantly in the F-Droid archive because of unresolved packaging issues. Overall choice is much more limited compared to Play Store, though I consider most apps (in both stores) to be rubble. Nothing more than noise in the universe.

Push notifications are of course a pain point – for those who need it. Somehow I always could do without it even though I’m runnning three apps which could fare batter on my battery with push notifications. Only one is a SaaS app however. I’m really excited about the great new solid battery technology which will vastly improve all aspects of old and tried Lithium batteries. That will render push notifications useless.

Anonymous Coward says:

Sure, we can pretend that the token controls (AOSP Privacy Settings, etc) being offered to mobile users empower them, but let’s not kid ourselves: mobile devices, for all their controls, conveniences and power, are tracking devices. In that regard, we can’t be surprised when the [perceived and real] transgressions of OEMs, ISPs, or services (i.e., Google) are exposed.

We also can’t kid ourselves about how deeply rooted in modern society and culture mobile devices have become. Yeah, sure,… we could all live without one (if we were hard-pressed; or, in the aftermath of a zombie apocalypse or whatever), but unless you’re one of locust-eating RMS’ ilk, this is still impractical and doesn’t address the problem. It merely remands the issue to the pedantic excuses of neo-luddism.

While I see many apt statements and arguments on either side of this issue, what I’m not seeing are solutions. At least, solutions beyond the KILL IT ALL WITH FIRE mentality.

We, as a community, as a society; as users, and, as citizens, must assert our rights and demand that they be honored as promised by our respective Constitutional protections. We must hold those who violate those protections accountable, even billion dollar corporations. Just because we use their product or service, doesn’t mean we relinquish our rights, despite the frivolous and exhaustive assertions of their Terms of Service.

Contrary to the myopic opinions of many judges who have ruled on the 4A application-mobile device issue, I hold that merely using a mobile device doesn’t mean we relinquish our rights, it means we are adopting modern technology. Nothing more. Nothing less. And the very idea that certain rights apply to this domain (First Amendment) and others do not (Fourth Amendment) does not hold water. Furthermore, our rights and protections apply to the citizen, regardless of domain or method.

In the end, it is our responsibility to protect our rights from corporate giants and data gluttons, even if that means putting our money where our mouth is by not financially supporting them. This, of course, denies us access to the very technology we choose to pursue; thereby limiting our freedom to forge our own path, or to pursue our own happiness. And until these very real problems are addressed, we continue the vicious circle.

Anonymous Coward says:

“If you have something that you don’t want anyone to know, maybe you shouldn’t be doing it in the first place, but if you really need that kind of privacy, the reality is that search engines including Google do retain this information for some time, and it’s important, for example that we are all subject in the United States to the Patriot Act. It is possible that that information could be made available to the authorities.” – Google’s Eric Schmidt

Add Your Comment

Your email address will not be published.

Have a Techdirt Account? Sign in now. Want one? Register here

Comment Options:

Make this the or (get credits or sign in to see balance) what's this?

What's this?

Techdirt community members with Techdirt Credits can spotlight a comment as either the "First Word" or "Last Word" on a particular comment thread. Credits can be purchased at the Techdirt Insider Shop »

Follow Techdirt

Techdirt Daily Newsletter

Techdirt Deals
Techdirt Insider Discord
The latest chatter on the Techdirt Insider Discord channel...
Loading...