Your phone may reveal doctor, church and pharmacy visits
Ordinary apps can pass location data to advertising and analytics companies, creating records that may reveal visits to places such as pharmacies, clinics, churches and support groups. These records can be linked with other information to identify people, raising privacy concerns even when no account is hacked.
The article says Apple and Android devices use advertising identifiers that can help connect activity across apps. The US Federal Trade Commission announced a 2026 settlement restricting Kochava’s sale or sharing of sensitive location data without consent; the company did not admit wrongdoing. In 2025, Gravy Analytics was breached, and researchers examining a sample of the allegedly stolen data found more than 30 million location points.
- App location data can reveal visits to sensitive places.
- Advertising identifiers can help connect activity across apps.
- A 2025 breach exposed millions of location points.
New here? Start with this
Many apps collect location data to provide services or measure advertising. That data can be passed to advertising and analytics companies, which may combine records from different apps using identifiers on Apple and Android devices.
A pattern of visits can suggest that someone went to a clinic, pharmacy, church or support group, even if their name is not attached. Combining location records with other information may make it possible to identify them, so this can raise privacy concerns without anyone breaking into an account.
In 2026, the US Federal Trade Commission reached a settlement restricting Kochava’s sale or sharing of sensitive location data without consent; Kochava did not admit wrongdoing. A year earlier, Gravy Analytics suffered a data breach, and researchers who examined a sample of the allegedly stolen data found more than 30 million location points.
Both sides, in good faith
The strongest fair case each way — we don't pick a winner.
The case for
Location data can help fund free apps and support useful advertising and analytics, while giving businesses insight into how services are used. With clear, informed consent and limits on sensitive uses, collecting and sharing such data may be a reasonable exchange that supports innovation and consumer choice.
The case against
Detailed location records can expose visits to clinics, pharmacies, churches or support groups, and combining them with other data may identify people without a hack or meaningful awareness. Because these inferences can reveal intimate or sensitive facts, critics argue that consent is often inadequate and that strong restrictions are needed to protect privacy and prevent misuse.