How Commercial Data Brokers Sell Unwarranted Geolocation Data to US Law Enforcement

Inside the digital architecture of a modern smartphone, a string of alphanumeric characters known as a Mobile Advertising Identifier (MAID) broadcasts its precise coordinates dozens of times an hour. Designed to help retail brands target local consumers, these 32-character beacons are entirely invisible to the device owner. But for federal law enforcement agencies, they represent a structural bypass of the United States Constitution. By purchasing this commercial data in bulk, government investigators can track the movements of millions of citizens without ever approaching a judge.[6]

The mechanism relies on a vast, largely unregulated secondary market. When a user downloads a weather app, a dating service, or a family safety tracker, they typically grant the software permission to access their device's GPS hardware. That location data is frequently packaged and sold to commercial data brokers, who aggregate the signals into massive, searchable databases. For example, investigations revealed that the popular family safety app Life360 was selling precise location data on its tens of millions of users to third-party brokers, while other individual brokers routinely collect over 10 billion location data points globally every day.[2][5]

Historically, the Fourth Amendment has shielded this level of intimate tracking. In the landmark 2018 Supreme Court decision Carpenter v. United States, the justices ruled that individuals maintain a reasonable expectation of privacy in their physical movements. Consequently, law enforcement must demonstrate probable cause and secure a warrant before compelling a telecommunications provider to hand over historical cell-site location information spanning seven days or more.[1]

However, the commercial data market operates outside that judicial framework. Because the government is purchasing the data on the open market rather than compelling a company to produce it, federal attorneys argue the transaction does not constitute a "search" under the Fourth Amendment. This interpretation relies on the state action doctrine, which holds that constitutional limits apply only to government coercion, not to voluntary commercial sales.[1]

The result is a system where the exact same geolocation data that requires a warrant when requested from Verizon or AT&T can be legally acquired with a credit card from a third-party aggregator. Federal agencies, including the Department of Homeland Security, the Internal Revenue Service, and the Department of Defense, have collectively spent tens of millions of dollars to access these commercial databases. A review of over 150 publicly available federal contracts showed the FBI expanding its ability to collect cellphone location data through vendors like Venntel.[1]

The scale of this surveillance is vast. Data brokers collect, analyze, and aggregate data that is highly sensitive and susceptible to abuse, often without the consumer's knowledge. The Federal Trade Commission has repeatedly warned that collecting this data without appropriate controls exposes individuals to potential harm, as the data can reveal visits to reproductive health clinics, political protests, places of worship, and substance abuse treatment centers.[5]

The practice has drawn explicit confirmation from the highest levels of federal law enforcement. In recent congressional testimony, FBI leadership acknowledged that the bureau purchases commercially available information for use in its operations. "By paying data brokers, the government can track individuals in real time and in deeply personal ways without a warrant or citizen notification," privacy advocates have warned, noting the complete lack of transparency regarding the total amount spent on citizen surveillance.[1]

The security implications extend beyond civil liberties to physical safety. Data brokers compile extensive dossiers that include the home addresses and daily routines of law enforcement officers, judges, and elected officials. In several high-profile cases, individuals have purchased this commercially available data to locate and attack public servants at their private residences, prompting calls for stricter judicial privacy laws.[4]

Legislative efforts to close this loophole have repeatedly stalled. Proposals like the Fourth Amendment Is Not For Sale Act would prohibit federal agencies from purchasing data that they would otherwise need a warrant to obtain. Despite polling indicating that 80 percent of Americans support such a requirement, the commercial acquisition of geolocation data remains a foundational pillar of modern federal investigations. In 2024, agencies like the Consumer Financial Protection Bureau proposed rules to stop data brokers from selling sensitive personal data, with regulators explicitly stating that "Fourth Amendment rights should not be for sale, under any circumstance." However, law enforcement purchases often remain exempt from these broader commercial regulations.[3][5]

Until statutory limits are enacted, the boundary between commercial advertising and state surveillance remains functionally erased. The legal protection of a citizen's physical movements now depends entirely on whether the government chooses to demand the data with a subpoena, or simply buy it from a vendor.[6]