Data brokers track everywhere you go, but their days may be numbered

Everywhere you go, you are being followed. Not by some creep in a raincoat, but by the advertisers wanting to sell you things.

The more advertisers know about you — where you go, which shops you visit and what purchases you make — the more they can profile you, understand your tastes, your hobbies and interests, and use that information to target you with ads. You can thank the phone in your pocket — the apps on it, to be more accurate — that invisibly spits out gobs of data about you as you go about your day.

Your location, chief among the data, is by far the most revealing.

Apps, just like websites, are filled with trackers that send your real-time location to data brokers. In return, these data brokers sell that data to advertisers, while the app maker gets a cut of the money. If you let your weather app know your location to serve you the forecast, you’re also giving your location to data brokers.

Don’t be too surprised. It’s all explained in the privacy policy you didn’t read.

By collecting your location data, these data brokers have access to intensely personal aspects of your life and can easily build a map of everywhere you go. This data isn’t just for advertising. Immigration authorities have bought access to users’ location data to help catch the undocumented. In one case, a marketing firm used location data harvested from phones to predict the race, age and gender of Black Lives Matter protesters. It’s an enormous industry, said to be worth at least $200 billion.

It’s only been in recent years that it was possible to learn what these data brokers know about us. But the law is slowly catching up. Anyone in Europe can request access to obtain or delete their data under the GDPR rules. California’s new consumer privacy law grants California residents access to their data.

But because so many data brokers collect and resell that data, the data marketplace is a fragmented mess, making it impossible to know which companies have your data. That can make requesting it a nightmare.

Jordan Wright, a senior security architect at Duo Security, requested his data from some of the biggest data brokers in the industry, citing California’s new consumer privacy law. Not all went to plan. As an out-of-state resident, only one of the 14 data brokers approved his request and sent him his data.

What came back was a year’s worth of location data.

Wright works in cybersecurity and knows better than most how much data spills out of his phone. But he takes precautions, and is careful about the apps he puts on his phone. Yet the data he got back knew where he lives, where he works and where he took his family on holiday before the pandemic hit.

“It’s frustrating not fully knowing what data has been collected or shared and by whom,” he wrote in a blog post. “The reality is that dozens of companies are monitoring the location of hundreds of millions of unsuspecting people every single day.”

https://youtu.be/2k7GbR2JeU0