The FTC Just Cornered a Location-Data Broker. The Surveillance Market Will Simply Change Its Shirt.

The newsroom lights are still the same sickly fluorescent. The coffee still tastes like burned policy. And my phone is still doing that tiny vibration that means some app is quietly negotiating for the right to know where I sleep. Outside, sirens braid with commuter traffic. Inside, the spreadsheet reality hums: your movements are a commodity, and America is the world capital of selling them in bulk.

FTC and Kochava reach a settlement over selling sensitive geolocation data

In late February, the Federal Trade Commission and Kochava told a federal judge in Idaho they had reached a settlement to resolve the agency’s case accusing the company of unfairly selling precise geolocation data. This is not abstract. The core allegation in the FTC’s original suit was that Kochava’s data could be used to trace people to sensitive places: reproductive health clinics, places of worship, shelters, and more. It is a map of vulnerability. And it gets packaged, priced, and passed around like it is just another line item.

In the language of courtrooms and compliance decks, this gets marketed as a win. In the language of real life, it is the government admitting out loud that the location-data industry can function like a stalking economy with a glossy interface.

I’m not here to clap. I’m here to audit.

Translation: “Location data” is a commercial alibi for coercion

Translation: when firms say “analytics” or “advertising measurement,” they mean “we built an industry that can shadow you through your most private decisions, then sell access to that shadow.”

The product is not an ad. The product is leverage.

If a dataset can point to a clinic, it can point to a union hall. If it can point to a mosque, it can point to an immigration attorney’s office. If it can point to a domestic violence shelter, it can point to the person who fled there. And the buyers do not need to be cartoon villains. They can be “consultants,” “research,” “lead generation,” or a shell company with a credit card and a smile.

Here is the mechanism: phones leak, apps collect, brokers launder, everyone shrugs

Here is the mechanism: your phone pings. An app you downloaded for something banal collects signals. Those signals get stitched to a mobile advertising ID, a persistent identifier that can follow you unless you reset it and lock down settings most people never see. The data gets aggregated and sold as “insights.” The buyer gets a file that might not include your name, but it does not need your name. It needs patterns: repeat visits, nighttime location, enough breadcrumbs to make you identifiable in practice while the paperwork hides behind “pseudonymous.”

Then comes the magic trick. Brokers insist the market is self-correcting because it has “terms” and “policies.” Translation: “We wrote a PDF saying you cannot do the thing our product exists to make easy.”

Follow the money: enforcement nudges, the market routes around

Follow the money: Kochava is one company in a supply chain that turns your life into a tradable asset. Downstream sits adtech, data enrichment, and “identity resolution,” plus industries that pretend they are not part of it. The settlement matters because it signals the government can treat this kind of location-data selling as an unfair practice under the FTC Act.

But the incentive is not to stop. The incentive is to route around enforcement. Change labels. Slice granularity. Add a delay. Require a “purpose” checkbox. Sell “audiences” instead of raw coordinates. Hand the dirtiest work to a contractor two corporate layers away.

The quiet part: the business model depends on you not having the time, the legal budget, or the psychic bandwidth to fight back. So yes, take the settlement. Put it on the record. Then stop pretending the problem is one bad actor. It is an economy. It is a power system. And it is overdue for a hard, public, enforceable reckoning.