/
Navigation
Chronicles
Browse all articles
Explore
Semantic exploration
Research
Entity momentum
Nexus
Correlations & relationships
Story Arc
Topic evolution
Drift Map
Semantic trajectory animation
Posts
Analysis & commentary
Pulse API
Tech news intelligence API
Browse
Entities
Companies, people, products, technologies
Domains
Browse by publication source
Handles
Browse by social media handle
Detection
Concept Search
Semantic similarity search
High Impact Stories
Top coverage by position
Sentiment Analysis
Positive/negative coverage
Anomaly Detection
Unusual coverage patterns
Analysis
Rivalry Report
Compare two entities head-to-head
Semantic Pivots
Narrative discontinuities
Crisis Response
Event recovery patterns
Connected
Search: /
Command: ⌘K
Embeddings: large
TEXXR

Chronicles

The story behind the story

days · browse · Enter similar · o open

An investigation details Webloc, an ad-based geo surveillance system providing access to a constantly updated stream of records from up to 500M mobile devices

Location data collected from mobile apps and digital advertising can reveal habits, interests and almost any other aspect of someone's life.

The Citizen Lab

Context & Ripple Effects

The reporting extends a long-running pattern in which location signals generated for advertising are repurposed into surveillance products. Earlier coverage described surveillance vendors drawing on ad-exchange location data, while a later leak exposed a separate warrantless phone-tracking product used by US agencies.

It also sharpens the stakes of the location-data marketplace: coverage has documented collectors, aggregators, and marketplaces monetizing mobile-location information, making the path from app data to downstream surveillance a supply-chain issue rather than only a single-vendor issue.

First-order effects

  • Webloc and the intermediaries supplying location records face heightened scrutiny over whether advertising-derived data can be packaged into continuously refreshed tracking access.
  • People whose devices contribute signals through mobile apps may be exposed to more persistent location inference than app-level privacy disclosures imply.

Second-order effects

  • Ad-tech platforms, app publishers, and data brokers may face pressure to identify and restrict downstream buyers whose use turns advertising telemetry into surveillance capability.
  • Competing location-data vendors will be judged less on nominal anonymization and more on whether their products can be linked back to individuals or used for ongoing tracking.

Third-order effects

  • If investigations continue to connect ad-data supply chains to surveillance tools, location-data governance is likely to shift from consent language toward controls on resale, access, and permitted use.
  • The market could increasingly divide between firms able to demonstrate constrained data flows and brokers whose business depends on broadly transferable behavioral signals; the eventual boundary will depend on enforcement and platform policy.

The trend: Advertising-derived mobile signals are becoming a core surveillance input, forcing the privacy debate from data collection toward the downstream trade and use of location access.

Discussion

  • @citizenlab @citizenlab on x
    NEW REPORT: “Uncovering Webloc: An Analysis of Penlink's Ad-based Geolocation Surveillance Tech” Our research confirms that ad-based surveillance tech Webloc is used by military, intelligence, and law enforcement agencies across the globe. https://citizenlab.ca/...
  • @jsrailton John Scott-Railton on x
    BREAKING: You checked the weather this morning. And you just told a surveillance company where you sleep. Meet #Webloc, used by ICE, cops & foreign govs to track 500m+ phones. No warrant required. Our latest @citizenlab investigation + how to protect yourself 🧵/1 [image]
  • @rondeibert Ron Deibert on bluesky
    “This represents the first confirmation of the use of ad-based surveillance technology in Europe.”  - Uncovering Webloc: An Analysis of Penlink's Ad-based Geolocation Surveillance Tech citizenlab.ca/research/ana...
  • @digitalwarrior @digitalwarrior on bluesky
    2/ What's new is not just the tech, but the pipeline: everyday commercial data becomes “investigative” location intelligence.  The report lays out how geofencing, route mapping, and association-by-co-location can be built from this ecosystem: citizenlab.ca/research/ana...
  • @jsrailton John Scott-Railton on bluesky
    6/ You're 🇪🇺European?  Protected by #GDPR, right?  —  It may be a paper wall.  —  We sent 96 FOI requests & got some dubious answers.  —  Meanwhile our collaborator @szabolcspanyi.bsky.social found multiple intel agencies in 🇭🇺#Hungary using Cobweb products. …
  • @jsrailton John Scott-Railton on x
    @penlink ... 11/ Help starve the ADINT dragnet. Do this now: iPhone: ⚙️Settings➡️Privacy & Security➡️ Tracking Turn off “Allow Apps to Request to Track” Android: ⚙️Settings➡️Privacy ➡️ Ads ➡️Delete Advertising ID It's only a beginning, but you don't owe any of these companies a d…