Sources: location data of millions of Grindr users were collected from a digital ad network and sold since at least 2017; Grindr says it has cut the data flow
Gay-dating app's user locations were collected and sold via ad networks since at least 2017; Grindr says it has curtailed the data it shares
Context & Ripple Effects
The reported ad-network data flow extends a record of location-data exposure at Grindr: a 2018 report found exact user locations exposed through its private API, while US officials later required a sale after concerns over some Beijing-based engineers' access to user data. A Norwegian regulator also fined Grindr over location disclosures to advertisers, making the claimed curtailment consequential beyond a single vendor relationship.
First-order effects
- Grindr says it has curtailed location-data sharing with ad networks, removing or reducing a channel through which millions of users' location data was reportedly collected and sold.
- The ad-network participants and downstream buyers relying on Grindr-derived location signals lose access to that source, while Grindr must account for how its advertising integrations handle sensitive data.
Second-order effects
- The report gives regulators a concrete, multiyear account of ad-tech data collection to examine alongside the prior Norwegian enforcement action, increasing pressure on Grindr's consent and disclosure practices.
- Other apps using ad-network integrations face sharper scrutiny of whether location data can be passed onward and sold, rather than merely used to serve ads.
Third-order effects
- If enforcement and app-level restrictions persist, sensitive-location advertising will shift from broad third-party data flows toward more tightly controlled, consent-based data access.
- The episode reinforces a regulatory challenge to location-based ad disclosures: data intermediaries, not just the app collecting the data, become central to privacy accountability.
The trend: Sensitive-app data is becoming a fault line for the ad-tech supply chain, with location sharing increasingly constrained by consent requirements and regulatory scrutiny.