Getting deja vu<\/span><\/h3>\nThat sounds a bit rich to some lawmakers, however, who extracted what appeared to be identical promises seven months ago. Back then, Senator Ron Wyden (D-OR) discovered<\/a> that a company called Securus Technologies was selling people’s location data to the cops, and insisted that America’s telecoms watchdog the FCC investigate.<\/p>\nWyden also wrote to the four major US cellular telcos \u2013 AT&T, Verizon, T-Mobile and Sprint \u2013 asking them to carry out an audit of which third parties had access to user location data, and ensure that they had people’s consent before sharing such personally identifiable information.<\/p>\n
As a result of those efforts, the network operators at the time pledged to put an end to the practice. Verizon sent a letter<\/a> [PDF] saying it had “conducted a comprehensive review” of its “location aggregator program” and as a result would kill the agreements it had with the two companies in the program, LocationSmart and Zumigo.<\/p>\nVerizon claimed that location data was only sold if subscribers had explicitly agreed to it, and that the sale of such information was only allowed “under specific conditions” which include fraud detection “or customer identification among others.”<\/p>\n
The other operators put out similar statements. “AT&T has no reason to believe that there are other instances of unauthorized access to AT&T customer location data,” the communications giant said. “Nonetheless, we are reviewing these issues carefully to ensure the proper handling of all AT&T customer information.”<\/p>\n
And T-Mobile US’s Legere told Senator Wyden to his face that he would end the practice of selling location data through third parties.<\/p>\n
That was then. Now…<\/span><\/h3>\nBut, just as we warned at the time<\/a>, it was all weasel words. Fast forward to this month, and journalist Joe Cox was able to pay a bounty hunter $300 to have someone’s T-Mobile US phone number tracked and located<\/a> \u2013 through the exact same location reselling system that had previously been exposed.<\/p>\nIn this case it wasn’t Securus but a company called Microbilt. However, the details were identical: it was an approved third party that purchased subscribers’ location records from a carrier, and through a chain of organizations, sold that private location data to pretty much anyone willing to pay it: from car salespeople, stalkers, and property managers to criminals, bounty hunters, and private investigators, potentially.<\/p>\n
Subscribers are not informed that their location data has been provided to a third party, and it is highly debatable that they have given their explicit permission to be tracked \u2013 despite what the cell networks claim \u2013 in large part because there is no way for users to tell their mobile operators to not<\/em> sell their location data.<\/p>\nFollowing the revelation this month that nothing has changed, Senator Wyden has again called for an FCC investigation, and again argued for a privacy law that would protect US citizens from having their personal data sold without their permission. Wyden has found another supporter in the form of Senator Kamala Harris (D-CA).<\/p>\n
Groundhog Day<\/span><\/h3>\nCue another round of promises from the mobile networks. Having been accused of lying to Senator Wyden, T-Mobile US boss Legere embarked on some history revision.<\/p>\n
![\"AT&T](\"https:\/\/regmedia.co.uk\/2019\/01\/07\/att5ge.jpg?x=174&y=115&crop=1\")
<\/p>\nAT&T (sucks) upgrades folks to 5G (Evolution) that isn’t actually 5G<\/h2>\n
READ MORE<\/span><\/a><\/div>\nBack in June, Legere made the seemingly unambiguous promise<\/a> that he had “personally evaluated this issue and have pledged that T-Mobile will not sell customer location data to shady middlemen.”<\/p>\nAfter repeat questions on what that actually meant, a few days later T-Mobile US clarified that it was “winding down our location aggregation agreements.” Yet seven months later, it seems that “winding down” still hadn’t started.<\/p>\n
Following this week’s outcry, Legere repeated the same argument as months earlier, and claimed that his telco was “doing it the right way to avoid impacting consumers.” He claimed to have promised to end the whole thing in March, though we have been unable to find any reference to March 2019 back in June 2018.<\/p>\n
Meanwhile, Sprint, which is being gobbled up by T-Mobile US<\/a>, gave a vague promise<\/a> to not “knowingly share personally identifiable geo-location information” unless lawfully compelled by the cops or Feds. Verizon, which appears to have been the only network carrier to have mostly pulled the plug on location data sales, said it is still shutting down<\/a> what’s left of its whereabouts-reselling operation: four location-sharing deals with roadside assistance companies, which now face the chop. Once those agreements are over, Verizon won’t sell any location data, and will only share people’s whereabouts to roadside assistance organizations with subscribers’ permission, it is claimed.<\/p>\nAs things stand, despite what appears, again, to be unambiguous promises to end location data selling, there is nothing to stop mobile telcos from simply coming up with a different name or spin for their location-peddling services, and firing it all up again.<\/p>\n
While there is money to be made and no law preventing it, it is a virtual certainty that AT&T and others will figure out a way to profit from selling their customers’ private data. Last time around, FCC boss Ajit Pai refused to investigate the matter, and while there has been no response from Pai on the renewed calls for an investigation thanks to the partial US government shutdown, it is a virtual certainly that he will continue his pro-telco agenda and stay away from the issue.<\/p>\n
Meanwhile, pressure grows in Congress to introduce a privacy law \u2013 an American version<\/a> of Europe’s GDPR<\/a> \u2013 especially in the light of abuses by Facebook and others. But that process is very far from certain given that many of the companies that benefit most from selling user data are also some of the most powerful and generous lobbyists in Washington DC. \u00ae<\/p>\n
Wyden also wrote to the four major US cellular telcos \u2013 AT&T, Verizon, T-Mobile and Sprint \u2013 asking them to carry out an audit of which third parties had access to user location data, and ensure that they had people’s consent before sharing such personally identifiable information.<\/p>\n
As a result of those efforts, the network operators at the time pledged to put an end to the practice. Verizon sent a letter<\/a> [PDF] saying it had “conducted a comprehensive review” of its “location aggregator program” and as a result would kill the agreements it had with the two companies in the program, LocationSmart and Zumigo.<\/p>\n Verizon claimed that location data was only sold if subscribers had explicitly agreed to it, and that the sale of such information was only allowed “under specific conditions” which include fraud detection “or customer identification among others.”<\/p>\n The other operators put out similar statements. “AT&T has no reason to believe that there are other instances of unauthorized access to AT&T customer location data,” the communications giant said. “Nonetheless, we are reviewing these issues carefully to ensure the proper handling of all AT&T customer information.”<\/p>\n And T-Mobile US’s Legere told Senator Wyden to his face that he would end the practice of selling location data through third parties.<\/p>\n But, just as we warned at the time<\/a>, it was all weasel words. Fast forward to this month, and journalist Joe Cox was able to pay a bounty hunter $300 to have someone’s T-Mobile US phone number tracked and located<\/a> \u2013 through the exact same location reselling system that had previously been exposed.<\/p>\n In this case it wasn’t Securus but a company called Microbilt. However, the details were identical: it was an approved third party that purchased subscribers’ location records from a carrier, and through a chain of organizations, sold that private location data to pretty much anyone willing to pay it: from car salespeople, stalkers, and property managers to criminals, bounty hunters, and private investigators, potentially.<\/p>\n Subscribers are not informed that their location data has been provided to a third party, and it is highly debatable that they have given their explicit permission to be tracked \u2013 despite what the cell networks claim \u2013 in large part because there is no way for users to tell their mobile operators to not<\/em> sell their location data.<\/p>\n Following the revelation this month that nothing has changed, Senator Wyden has again called for an FCC investigation, and again argued for a privacy law that would protect US citizens from having their personal data sold without their permission. Wyden has found another supporter in the form of Senator Kamala Harris (D-CA).<\/p>\n Cue another round of promises from the mobile networks. Having been accused of lying to Senator Wyden, T-Mobile US boss Legere embarked on some history revision.<\/p>\n READ MORE<\/span><\/a><\/div>\n Back in June, Legere made the seemingly unambiguous promise<\/a> that he had “personally evaluated this issue and have pledged that T-Mobile will not sell customer location data to shady middlemen.”<\/p>\n After repeat questions on what that actually meant, a few days later T-Mobile US clarified that it was “winding down our location aggregation agreements.” Yet seven months later, it seems that “winding down” still hadn’t started.<\/p>\n Following this week’s outcry, Legere repeated the same argument as months earlier, and claimed that his telco was “doing it the right way to avoid impacting consumers.” He claimed to have promised to end the whole thing in March, though we have been unable to find any reference to March 2019 back in June 2018.<\/p>\n Meanwhile, Sprint, which is being gobbled up by T-Mobile US<\/a>, gave a vague promise<\/a> to not “knowingly share personally identifiable geo-location information” unless lawfully compelled by the cops or Feds. Verizon, which appears to have been the only network carrier to have mostly pulled the plug on location data sales, said it is still shutting down<\/a> what’s left of its whereabouts-reselling operation: four location-sharing deals with roadside assistance companies, which now face the chop. Once those agreements are over, Verizon won’t sell any location data, and will only share people’s whereabouts to roadside assistance organizations with subscribers’ permission, it is claimed.<\/p>\n As things stand, despite what appears, again, to be unambiguous promises to end location data selling, there is nothing to stop mobile telcos from simply coming up with a different name or spin for their location-peddling services, and firing it all up again.<\/p>\n While there is money to be made and no law preventing it, it is a virtual certainty that AT&T and others will figure out a way to profit from selling their customers’ private data. Last time around, FCC boss Ajit Pai refused to investigate the matter, and while there has been no response from Pai on the renewed calls for an investigation thanks to the partial US government shutdown, it is a virtual certainly that he will continue his pro-telco agenda and stay away from the issue.<\/p>\n Meanwhile, pressure grows in Congress to introduce a privacy law \u2013 an American version<\/a> of Europe’s GDPR<\/a> \u2013 especially in the light of abuses by Facebook and others. But that process is very far from certain given that many of the companies that benefit most from selling user data are also some of the most powerful and generous lobbyists in Washington DC. \u00ae<\/p>\nThat was then. Now…<\/span><\/h3>\n
Groundhog Day<\/span><\/h3>\n
<\/p>\nAT&T (sucks) upgrades folks to 5G (Evolution) that isn’t actually 5G<\/h2>\n