How Verizon partner Turn is using the UIDH injected by Verizon to resurrect deleted cookies
Jonathan Mayer / Web Policy :
Context & Ripple Effects
Jonathan Mayer's Web Policy write-up documents what researchers had begun flagging in Verizon's network: the carrier injects a unique identifier header (UIDH) into its subscribers' mobile traffic, and ad-technology partner Turn is exploiting it to rebuild tracking identifiers that consumers had deleted — meaning the standard 'clear your cookies' defense does not work on Verizon's network. The finding landed just as mainstream coverage was calling Verizon's mobile 'supercookies' a threat to privacy, turning a technical curiosity into a named-partner scandal.
The stakes compound through the rest of the corpus arc: within months Verizon folds its supercookie apparatus into AOL's ad network (merging the cellphone tracking headers with AOL's ad stack), which is precisely the combination privacy advocates warned about when the AOL deal surfaced. The endpoint arrives two years later, when [[a:915098|Turn settles with the FTC over charges that it kept tracking consumers after they opted out]].
First-order effects
- Verizon subscribers who delete their cookies are not actually de-tracked: Turn's use of the carrier-injected UIDH restores deleted identifiers, so opt-outs and cookie clears are silently undone at the network layer.
- Verizon now faces the exposure directly — its own infrastructure is the tracking mechanism, implicating every customer whose traffic carries the header.
Second-order effects
- The AOL acquisition becomes a liability multiplier rather than a clean asset: folding UIDH-based identification into AOL's ad network extends the practice to cross-device matching, forcing the combined company to defend the technique publicly instead of burying it inside one partner.
- Privacy advocates gain a concrete, nameable case — a specific carrier and a specific ad firm — that shifts the debate from abstract 'supercookie' warnings to accountability demands aimed at both companies.
Third-order effects
- If carriers can be held liable for what partners do with network-injected identifiers, the pattern points toward regulator-enforced boundaries between network operators and ad-technology firms — the FTC's later action against Turn is the first structural test of that line.
- Consumer trust in carrier 'privacy products' gets priced against this record: Verizon later markets a Safe Wi-Fi VPN as blocking ad-tracking while its policy language says otherwise, so each disclosure erodes the credibility of the next privacy pitch from the same company.
The trend: Mobile carriers are becoming ad-technology platforms, and the resulting conflict between network-injected identifiers and consumer opt-out rights is pushing regulators to treat carrier data practices as enforceable privacy violations.