{"id":24346,"date":"2019-01-11T14:42:52","date_gmt":"2019-01-11T14:42:52","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/29707\/Senate-Investigates-Phone-Carriers-Selling-Location-Data.html"},"modified":"2019-01-11T14:42:52","modified_gmt":"2019-01-11T14:42:52","slug":"senate-investigates-phone-carriers-selling-location-data","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/senate-investigates-phone-carriers-selling-location-data\/","title":{"rendered":"Senate Investigates Phone Carriers Selling Location Data"},"content":{"rendered":"

\"Close-Up<\/span><\/span><\/p>\n

Your phone location data was still on sale, seven months after mobile carriers said they were ending that practice.<\/span><\/p>\n

Nakhorn Yuangkratoke \/ EyeEm<\/span><\/p>\n

This is a call that mobile carriers won’t be happy to get.<\/p>\n

Several lawmakers are demanding that the Federal Communications Commission investigate companies like T-Mobile, AT&T, Sprint and Verizon after a\u00a0Motherboard story<\/a> Tuesday revealed that major mobile carriers were still selling customer location data to third parties, which would then offer the sensitive information to shady buyers.<\/p>\n

Your phone is a window into your whereabouts, as cell towers and GPS data provide nearly pinpoint accuracy on your every move. It’s why law enforcement rely on it to build cases<\/a>. Abusive stalkers<\/a>\u00a0use it too.<\/p>\n

While privacy issues have affected tech giants, such as Google<\/a> and Facebook<\/a>, you can opt out of those platforms. With phone location data tracking, though, there aren’t many options for opting out of tracking other than not having a device to begin with.<\/p>\n

Mobile carriers have been selling location data linked to people’s phone numbers even though major carriers said seven months ago<\/a> that they were ending this practice. Motherboard’s report showed the practice was still going on.<\/p>\n

Several senators and an FCC commissioner now want an investigation.<\/p>\n

“It’s not that people ‘don’t care about privacy,’ as some have argued \u2013 it’s that customers, along with policymakers, have been kept in the dark for years about data collection and commercialization practices,” Sen. Mark Warner, a Democrat from Virginia, said in a statement.<\/p>\n

He called for regulation to ensure that companies are upfront with customers about how their data is being used and sold. Multiple lawmakers have drafted privacy legislation<\/a>, including Sen. Ron Wyden, a Democrat from Oregon. His bill, introduced in November<\/a>, would include a “Do Not Track” database, allowing Americans to opt out of data tracking.<\/p>\n

Wyden\u00a0initially requested an FCC investigation<\/a> last spring when the sale of phone location data was first revealed. At the time, the\u00a0FCC said it was investigating LocationSmart<\/a>, a company that provided geolocation data on nearly any phone in the US. \u00a0<\/p>\n

Now, Wyden’s doubling down on his request.<\/p>\n

“Sen. Wyden has previously called on the FCC to investigate wireless carriers’ relationships with location aggregators and data brokers, and believes an investigation is even more necessary given the news this week. He also believes the FTC must investigate these clear abuses of Americans’ personal data,” a spokesman for the senator said in a statement.<\/p>\n

While location data from your phone can be used for legitimate purposes, like emergency roadside assistance and finding your lost device, it is often sold to data aggregators that use the information for purposes outside of your control.<\/p>\n

T-Mobile noted that it didn’t have a relationship with location aggregator MicroBilt — which indirectly provided location data to Motherboard through a series of handoffs — but did have a relationship with location aggregator Zumigo. According to Motherboard, Zumigo gave that location data to MicroBilt without notifying the tracked person.<\/p>\n

“The American people have an absolute right to the privacy of their data, which is why I’m extraordinarily troubled by reports of this system of repackaging and reselling location data to unregulated third party services for potentially nefarious purposes,” Sen. Kamala Harris, a Democrat from California, said in a statement.<\/p>\n

Harris also called on the FCC needed to “immediately investigate these serious security concerns.”<\/p>\n

Jessica Rosenworcel, an FCC commissioner, said in a\u00a0tweet<\/a>\u00a0Tuesday that the agency “needs to investigate. Stat.”\u00a0<\/p>\n

The FCC didn’t immediately respond to a request for comment.<\/p>\n

T-Mobile CEO John Legere, who originally promised Wyden<\/a>\u00a0that his company would stop selling customer location data in June, set a new deadline on Wednesday. Legere tweeted that the practice would end this March<\/a>. The delay is to make sure that customers who use the data for safety services aren’t hurt by the changes, he explained.<\/p>\n

\n
\n

What broken promise? We are in full swing of ending it – and it will be completely done in March, as planned and promised. We\u2019re shutting it down -one by one, making sure consumers who use this for things like health and safety services have a chance to make other arrangements.<\/p>\n

\u2014 John Legere (@JohnLegere) January 10, 2019<\/a><\/p><\/blockquote>\n<\/div>\n

AT&T said that it cut off access to MicroBilt and was continuing to end partnerships with other location data aggregators.<\/p>\n

“We only permit sharing of location when a customer gives permission for cases like fraud prevention or emergency roadside assistance, or when required by law,” an AT&T spokesman said.<\/p>\n

Sprint and Verizon didn’t immediately respond to requests for comment.<\/p>\n

None of the companies clarified how customers were giving consent to their data to be sold to third parties, or how much the companies were selling that data for.\u00a0<\/p>\n

First published Jan. 10, 8:58 a.m. PT.
Update, 11:55 a.m. PT:<\/strong> Embeds tweets from Rosenworcel and Legere.<\/p>\n

CES 2019<\/a>: See all of CNET’s coverage of the year’s biggest tech show.<\/p>\n

CES schedule<\/a>: It’s six days of jam-packed events. Here’s what to expect.<\/p>\n