Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Why is my iphone tracking my location to a secret database, wifi access points and cell towers?

Source:


http://www.guardian.co.uk/technology/2011/apr/20/iphone-tracking-prompts-privacy -fearshttp://www.engadget.com/2011/04/20/researchers-find-ios-4-records-your-location- in-system-file-syn/


Summary:


Security researchers have discovered that Apple's iPhone keeps track of where you go – and saves every detail of it to a secret file on the device which is then copied to the owner's computer when the two are synchronised.


What I want to know is how I can turn this off? I do NOT want this location tracked and I consider this a violation of my privacy as this is done WITHOUT my consent. Please provide a solution to TURN THIS TRACKING OFF.

Posted on Apr 20, 2011 4:57 PM

Reply
71 replies

Apr 20, 2011 7:34 PM in response to Vashnik

Let's not feed the trolls 🙂

It IS taking place, it's been proven. It's OK to be skeptical of blog and news sites, or security researchers -- that's why the two guys released their program to the public along with the source code. If you don't believe it -- check out their site. Run the program for yourself and look at the source code (if you are intelligent enough and not in denial).


Their program, research and FAQ can be found here:


http://petewarden.github.com/iPhoneTracker/

Apr 21, 2011 5:47 AM in response to NiqueXyZ

One thing I want to point out. This is very similar to the summer when you had the iPhone 4 antenna issue. It wasn't a major issue and not many people complained about it. But what happened? The media found out, exaggerated it and made everyone think there phone was broken. So then what happened? Suddenly, everyone started noticing an issue even though they didn't see one yesterday. Apple did not issue a statement, because they didn't think it was an issue. You had no problems using the phone a month ago, yet suddenly now everyone does because the media said the phone is tracking you. People can find out where you go in various other ways. People stalk you, hack into your email, hack into your cell phone providers firewall to get data from them. This just adds one small way (which has been there by the way for almost a year). So let's be a little realistic. Do you really think that (assuming that no one was doing this before) just because of this report, someone is going to steal your phone hook it up to a computer, jailbreak it, run the utility JUST TO FIND OUT WHERE YOU HAVE BEEN? I mean come on. I mean websites track wherever you go too. Facebook can track every where you have been and go even after you leave their website. Every piece of electronics that you own probably stores sensitive data about you all the time. Just saying, if no one was going to break in and steal data off your phone before, nothing is really going to change because of this.

Apr 21, 2011 7:23 AM in response to applefandan

It's not the same thing at all...the antenna issue is resolved by usig a case.

This issue (at the moment) is not resolved by ANYTHING -- it seems you CAN'T turn it off even though in their terms of services it says you can "opt out" and "withdraw your consent" by turning off location services. I turned off location services and it's still creating the tracking database....whiskey tango foxtrot!?


There are reports of people already adding this to viruses and trojans -- so let's say you get a virus, that virus will search your computer for the .db file -- and then upload it to a hacker's server....the hacker knows everything about you now -- where you work, what restaurants you like to eat at, the mac address of your wifi access points at home and work, where your kids (if you have any) go to school -- all of that can be determined from this data. Now -- a simple remedy to this is to encrypt the sync \ backup file (it's an option in itunes) -- but if apple DOESN'T say anything and people aren't aware that this could be a potentially BIG PROBLEM.....


Realistically, in the past, there have been viruses that have caused a lot of damage to computers...but now in this age it's all about information gathering -- credit card numbers, passwords, browsing history -- and now location.


Also you mention hooking a phone to a computer to jailbreak it...wrong. Remember jailbreakme.com? It exploited devices without even being attached to a computer...right from safari on the phone. People were going into the apple stores and running it on the demo devices (lol) -- so let's be a little more realistic here -- I agree...This is a security problem and a threat to my and your (and all of our) privacy.


I do not consent to being tracked in a database file on my phone24\7. It says I can opt out in their TOS but I really can't. This is now a civil matter and I hope the EFF gets involved.


Now I don't want to contribute to the media fear mongering -- encrypt the backup file in itunes and wait for someone in the jailbreak \ devteam community to disable the tracking and everything will be fine. I have a feeling it will be disabled soon...but Apple needs to be held accountable for what they have done here.

Apr 21, 2011 7:30 AM in response to NiqueXyZ

NiqueXyZ wrote:


It's not the same thing at all...the antenna issue is resolved by usig a case.

But really there was no issue to start. People who DON'T use the case still don't have problems because they don't have the media blowing it up in their face.

NiqueXyZ wrote:


There are reports of people already adding this to viruses and trojans -- so let's say you get a virus, that virus will search your computer for the .db file -- and then upload it to a hacker's server....the hacker knows everything about you now -- where you work, what restaurants you like to eat at, the mac address of your wifi access points at home and work, where your kids (if you have any) go to school -- all of that can be determined from this data.

OK well think of this. If you have a PC then I am sure you have either:

A) Gotten tons of viruses which probably steal personal information from your computer anyway (for example your address). In this case if you haven't been tracked because of the stuff they already stole from you, it isn't going to be much different. If hackers steal all this data, are they going to stalk every person? No, it doesn't make sense.

B) Have a strong antivirus program that will stop the virus anyway.

NiqueXyZ wrote:


Also you mention hooking a phone to a computer to jailbreak it...wrong. Remember jailbreakme.com? It exploited devices without even being attached to a computer...right from safari on the phone. People were going into the apple stores and running it on the demo devices (lol)

Yes and this issue was resolved. And it ONLY occurred if you visited a malicious web page. So as long as you visit trusted websites such as apple, google, yahoo, etc you wouldn't have had the problem anyway.


Basically, there have been tons of data breeches in the past some of which have probably occurred/affected your device. This is just one other one. And yes location data HAS been exposed in the past, but you haven't seen increased crimes of stalking or anything. If you don't have anyone after you or you haven't done anything illegal, you have nothing to worry about.

Apr 21, 2011 7:50 AM in response to applefandan

"But really there was no issue to start. People who DON'T use the case still don't have problems because they don't have the media blowing it up in their face."


Consumer Reports and other consumer advocate groups disagree with that statement to this day, and wasn't their antenna designer fired as a result? Yes -- he was: http://www.tomsguide.com/us/Mark-Papermaster-Steve-Jobs-iPhone-4-Antennagate-iph one,news-7717.html


"OK well think of this. If you have a PC then I am sure you have either:"


I stopped reading after "if you have a PC" -- PC stands for personal computer...all Apple devices are PC's contrary to Jobs' propaganda (even iPhones). The term was coined a long time ago to differentiate newer personalized devices from midrange and mainframe computers. OK I'm being a douche I really didn't stop reading, but it bugs me whenever I hear mac fans say "PC" when they are referring to non-mac machines and repeating job's blather.


"Yes and this issue was resolved. And it ONLY occurred if you visited a malicious web page."


It's not ME going to the webpage that I'm worried about - it's someone else who has stolen my device.


Here's some more data on the "security" of ios:


http://www.securitygeneration.com/privacy/researchers-extract-iphone-data-and-pa sswords-in-minutes/

http://www.tipb.com/2011/02/10/security-researchers-iphone-passwords-circumvente d-data-stolen-6-minutes/


I don't want them getting a history of my location ever since I bought the phone along with all my passwords and keychain data 🙂


And there are newer jailbreaks out there even for the current versions of iOS (on every single device except the iPad 2 -- and that is coming in a week or so, it's already been demo'd on youtube); and even unreleased exploits that are purposely held back from the public just so apple will not know about them and fix them.


Am I being a little out of control and over-exagerating scenarios? Sure...but when it comes to security and privacy, location is a VERY important thing and should not be brushed off or taken lightly.


One writer on CNet gave a good insight on this situation -- think about it...What if this were Google and not Apple who were caught doing this...do you think they would get a free pass from everyone? Doubtful. I bet even you yourself would be saying how great Apple is for not doing so and criticising Google for violating user privacy. ..but now the tables are turned 🙂

Apr 21, 2011 10:28 AM in response to NiqueXyZ

NiqueXyZ wrote:


"But really there was no issue to start. People who DON'T use the case still don't have problems because they don't have the media blowing it up in their face."


Consumer Reports and other consumer advocate groups disagree with that statement to this day, and wasn't their antenna designer fired as a result? Yes -- he was: http://www.tomsguide.com/us/Mark-Papermaster-Steve-Jobs-iPhone-4-Antennagate-iph one,news-7717.html

The fact that the antenna designer left is true but the reason for it is pure speculation. It is unknown whether or not he was really fired or if he just left. The quote on quote "issue" is still there but the point is average users don't experience problems from day to day use. You can MAKE it happen if you try, but daily usage doesn't do much.

NiqueXyZ wrote:


Am I being a little out of control and over-exagerating scenarios? Sure...but when it comes to security and privacy, location is a VERY important thing and should not be brushed off or taken lightly.

I agree with you. Location data is very personal and shouldn't be taken lightly. But honestly the chances of your phone being stolen now is no different than it was before. And as you said encrypting the backups is a workaround. So if someone was VERY concerned about the information stored on their phone or about this issue they would have cared enough to do some research and encrypt their backups. If Apple comes out with an official statement, it isn't going to change anything because the people who cared enough already did the fix while the people who didn't won't look at it anyway.


All I am trying to say is that your data is very vulnerable EVERYWHERE. There are ways to hack into your computer, your records, or any other place personal data is stored. Data has been exploited before. This isn't anything new. The scenarios that you provide aren't likely to happen and there really is not much to worry about.

Apr 21, 2011 10:37 AM in response to NiqueXyZ

Apple is, by secretly tracking the iPhone and iPad users, showing a lack of respect for its customers integrity. Like Hall & Oats once sang in their song: "Whatever you do will come back to you!". Apple will lose the trust of its customers, and it will gradually be replaced by a company with as good or better products than Apple, and - not the least - a company that has the confidence of its customers. 🙂

Apr 21, 2011 11:03 AM in response to Vossing

Vossing wrote:


Apple is, by secretly tracking the iPhone and iPad users, showing a lack of respect for its customers integrity. Like Hall & Oats once sang in their song: "Whatever you do will come back to you!". Apple will lose the trust of its customers, and it will gradually be replaced by a company with as good or better products than Apple, and - not the least - a company that has the confidence of its customers. 🙂

You realize that Apple may not have known that it was tracking customers. I recently read an article that mentions the data was stored in a certain cache file that is SUPPOSED to be emptied. It could be that this is a minor bug that is fixed in the next update.

Apr 28, 2011 12:21 PM in response to applefandan

"You realize that Apple may not have known that it was tracking customers. I recently read an article that mentions the data was stored in a certain cache file that is SUPPOSED to be emptied. It could be that this is a minor bug that is fixed in the next update."



1. Please provide a link to the article.

2. Please resolve why Apple would save this file on machines you sync the device to, if they 'may not have known'.


<Edited by Host>

Apr 21, 2011 1:00 PM in response to SellYourPrivacyForProfits

1. http://daringfireball.net/linked/2011/04/21/andy-ihnatko-location-log

"The big question of course, is why Apple is storing this information. I don’t have a definitive answer, but my little-birdie-informed understanding is that consolidated.db acts as a cache for location data, and that historical data should be getting culled but isn’t, either due to a bug or, more likely, an oversight. I.e. someone wrote the code to cache location data but never wrote code to cull non-recent entries from the cache, so that a database that’s meant to serve as a cache of your recent location data is instead a persistent log of your location history. I’d wager this gets fixed in the next iOS update."

2. When I say may not have known, I mean they didn't know they were SAVING it. They were storing it because many phones do apparently (android, windows phone etc) for some reason that I am unaware of. So they knew they were storing it they just didn't know they weren't deleting it.

3. I don't think they would forget really. I think that it was either a miscommunication error, the code was never placed into the final version of the OS, or that particular piece of code has a bug that is causing it not to work.

4. Absolutely. Because if they DIDN'T care about users privacy they wouldn't have any market share. People buy apple products because they are reliable and tend not to get viruses. If apple didn't take privacy seriously, no one would buy their products and they would not be a trusted company. You know just because apple had one or two security breaches, doesn't mean they don't care about users privacy. I mean look at google. They accidentally collected thousands of wifi routers' information but do you think that they don't care about privacy? Windows Vista was an OS that received lots of virus attacks that stole personal information but does that mean Microsoft doesn't care about privacy? No.

Apr 21, 2011 1:41 PM in response to NiqueXyZ

Aside from the privacy concerns, I'd be just as concerned about accuracy. I use a number of tracking apps based on the GPS, and they are within a few feet. This database, however, is wayyyyy off sometimes. It shows me (i.e., my iPhone) as having been in a city multiple times that is three hundred miles from me. I've never been there once, and neither has my phone!

Why is my iphone tracking my location to a secret database, wifi access points and cell towers?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.