Privacy Concerns Escalate as Investigation Uncovers Locate X Tracking Tool

An investigation spearheaded by 404 Media has uncovered a tracking tool capable of monitoring the precise movements of individuals’ mobile devices using their unique advertising identifiers. Known as Locate X, this tool reportedly allows users to track a phone's location across different states, raising significant privacy concerns.

The investigation revealed that Locate X, developed by Babel Street, enables users to view mobile devices as red dots on a map and track their movements in real-time. For example, the software was shown tracing a specific device from a home in Alabama to several locations, including a Lowe’s store, a church, and eventually a Florida abortion clinic.

These findings have sparked alarm, especially given the legal complexities surrounding abortion in these states. Alabama prohibits abortion entirely, while Florida enforces a ban after six weeks. Following the Supreme Court’s 2022 decision to overturn Roe v. Wade, public concern over the misuse of location data has surged. Tech companies like Google have responded by implementing measures to automatically delete visits to sensitive locations, such as abortion clinics, from user histories.

Locate X operates by utilizing mobile advertising identifiers—unique codes assigned to devices for targeted advertising. This data, aggregated by advertisers, is then sold to data brokers, who can use it to build tracking tools like Locate X. Babel Street claims that the tool is restricted to use by government entities, including agencies such as the Department of Homeland Security and the Secret Service. However, 404 Media found that this restriction is inconsistently enforced.

During the investigation, Atlas Data Privacy Corp, a New Jersey-based privacy advocacy group, hired a private investigator to pose as a potential client. While inquiring about obtaining location data, the investigator was told by a Babel Street salesperson that government affiliation was “good enough” to qualify for access and that verification was rarely conducted.

Atlas has since filed a lawsuit against Babel Street, alleging violations of New Jersey’s data privacy regulations. These developments have underscored the urgent need for stricter controls over the use of tracking technologies and data broker practices.