Slashdot Mirror


Police Are Using Google's Location Data From 'Hundreds of Millions' of Phones (cnet.com)

"When law enforcement investigations get cold, there's a source authorities can turn to for location data that could produce new leads: Google."

An anonymous reader quotes CNET: Police have used information from the search giant's Sensorvault database to aid in criminal cases across the country, according to a report Saturday by The New York Times. The database has detailed location records from hundreds of millions of phones around the world, the report said. It's meant to collect information on the users of Google's products so the company can better target them with ads, and see how effective those ads are. But police have been tapping into the database to help find missing pieces in investigations.

Law enforcement can get "geofence" warrants seeking location data. Those kinds of requests have spiked in the last six months, and the company has received as many as 180 requests in one week, according to the report.... For geofence warrants, police carve out a specific area and time period, and Google can gather information from Sensorvault about the devices that were present during that window, according to the report. The information is anonymous, but police can analyze it and narrow it down to a few devices they think might be relevant to the investigation. Then Google reveals those users' names and other data, according to the Times...

[T]he AP reported last year that Google tracked people's location even after they'd turned off location-sharing on their phones.

Google's data dates back "nearly a decade," the Times reports -- though in a statement, Google's director of law enforcement and information security insisted "We vigorously protect the privacy of our users while supporting the important work of law enforcement." (The Times also interviewed a man who was arrested and jailed for a week last year based partly on Google's data -- before eventually being released after the police found a more likely suspect.)

"According to the Times, Google is the primary company that appears to be fulfilling the warrants," reports Gizmodo, adding that Apple "says it can't provide this information to authorities..."

"A thriving black market in location data has persisted despite promises from carriers to stop selling it to middlemen, who divert it from intended uses in marketing and other services."

8 of 125 comments (clear)

  1. So they never delete anything? by gweihir · · Score: 5, Interesting

    Will make it a lot easier for the next fascist government to identify all those that were at the "wrong" events or ever physically close to the "wrong" people, even decades later.

    This data should be deleted after at most a year.

    --
    Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
    1. Re:So they never delete anything? by Anonymous Coward · · Score: 2, Interesting

      My friend, we live in the age of cheap storage. Nothing will ever be deleted, ever again. Instead, might I suggest never collecting the data in the first place?

  2. Re:Wtf by Anonymous Coward · · Score: 5, Interesting

    It's wrong. Our devices should not work that way. It is too easy to be accused of wrongdoing, and have our privacy further violated. You will be added to a watchlist for the unsolved crime. You employer will likely be contacted by the police and they will not tell you. Your career could end simply because you were in the vicinity of a crime.

    Never, never give a company or the police more information than absolutely necessary.

  3. Don't worry! by Anonymous Coward · · Score: 3, Interesting

    This time around Anne Frank's diary will be on a remote wipeable smartphone, and it won't take them years to find them hiding in a attic or cellar, it will just take a check of facebook posts and friends webs to track down and purge the undesirable cultural, relgious, sexual, or ethnic groups we need demonized for the temporary stability of our regime. Of course the addition this time, is that we can take DNA samples from everyone and sequence them so even the most tenuous member of a group can be ethnically purged, and only our purest brethren saved and allowed into leadership positions in the party.

    You think I am kidding? Just watch.

  4. It's worse by Anonymous Coward · · Score: 2, Interesting

    All the companies that collect this data have vulnerable storage of the raw data. If the NSA is willing to spend the money to analyze, they can harvest the raw, ananonymized data by tapping the exposed load balancers or copying the logs from the hosts in AWS or elsewhere. And so can every other nation's security experts and moles, by getting employees inside those companies to steal encryption keys or access keys. It's just not that well secured.

  5. Is the data reliable? by AxeTheMax · · Score: 4, Interesting

    I look at my location history sometimes, especially after long trips. Two years ago on reviewing a trip to India it said I had been in Patna, a city I've never been within several hundred miles of. So I knew it was not dependable. I've just looked up the location history for that period in detail. It is still there. It says that I was in Domino's Pizza in Ashok Rajpath Rd, Chowk, Patna, it also says that I then travelled a distance of 1100 miles to a place in southern India where I had actually been, in 13 minutes, by car. It was probably caused by someone identifying a business address wrongly, but it is absolutely not reliable. Lawyers should question its accuracy.

  6. Re:Good by Anonymous Coward · · Score: 2, Interesting

    Even better it's a great way for a criminal to get away with a crime and leave other people harassed or even convicted based on circumstantial data. Leave your cell phone at home and you have an air tight alibi. Have none at all and you're invisible to the system. With a police state, invisible is the best sort of state to be in.

  7. Re: Good by Creepy · · Score: 4, Interesting

    Oh? By posting here without identifying credentials or using an alias violates the Computer Fraud and Abuse Act of 1984. I have you on a class I felony. Speaking of, I need to report myself to termination bay 2 for posting using an alias.

    Kidding aside, the law literally says that. It was designed mostly to protect ATMs but due to loose wording is often used to prosecute almost any computer "crime." You literally can't visit a website legally without giving them identifying credentials first under that law. Even a subscribe to a website page is illegal under that law (you need to provide that information before visiting). The law was partially written for modems, but the writers didn't understand how modems worked - they just saw the 1984 movie War Games and panicked.