The Digital Security Digest, by Freedom of the Press Foundation (FPF), is a weekly newsletter with security tips that keep you, your sources, and your devices safe. If someone shared this newsletter with you, please subscribe here.

Ad-based location tracking data is a hazard to everyone, including the Pentagon

We’ve previously covered how federal, law enforcement, and private actors use mobile apps to serve you ads with the potential to track and sell your location data. Such tracking methods often include real-time bidding on ad impressions — essentially, how often an ad is displayed on a screen — and software development kits commonly embedded in mobile apps.

Following reports earlier this year that military personnel in the field have been targeted based on commercial location data, Pentagon officials told Reuters and members of Congress that ad-based location tracking on troops’ phones and computers has been disabled. However, a letter sent by Sen. Ron Wyden and Rep. Pat Harrigan to the Defense Department’s inspector general urged further investigation into the threats posed to military personnel by the purchase of commercial location data.

What you can do

You can make a meaningful impact on commercial ad tracking on your mobile devices with some simple steps.

  • Disable mobile advertising IDs. A substantial amount of location-based ad tracking on your mobile device is tied back to individual devices through advertising IDs. However, on both Android and iOS you can disable this within your settings app.
    • iPhone users: Settings app > Privacy & security > Tracking > Disable Allow apps to request to track
    • Android users: Settings app > Security & privacy > Privacy controls > Ads > Delete advertising ID
  • Restrict your location permissions. Go into your phone’s Settings app and find your location settings. Unless it really needs it — perhaps for your maps app — disable it for now. As needed, you can always turn it back on later.
    • iPhone users: Settings > Privacy & security > Location services > Toggle unnecessary apps
    • Android users: Settings > Security & privacy > Privacy controls > Permission manager
  • While you’ve got momentum on hardening your mobile device, learn more. There’s plenty more to do to help maximize chat safety, lower the risk of malware, and more. Read our guide to mobile device security.

Our team is always ready to assist journalists with digital security concerns. Reach out here, and stay safe and secure out there.

Best,
Martin

Martin Shelton
Deputy Director of Digital Security
Freedom of the Press Foundation