Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
×
Facebook Social Networks Privacy Security

Turning Off Facebook Location Tracking Doesn't Stop It From Tracking Your Location (gizmodo.com) 165

Even if you explicitly tell Facebook to not track your location, it says it will still use your IP address to track your location. Kashmir Hill, reporting for Gizmodo: Aleksandra Korolova has turned off Facebook's access to her location in every way that she can. She has turned off location history in the Facebook app and told her iPhone that she "Never" wants the app to get her location. She doesn't "check-in" to places and doesn't list her current city on her profile.

Despite all this, she constantly sees location-based ads on Facebook. She sees ads targeted at "people who live near Santa Monica" (where she lives) and at "people who live or were recently near Los Angeles" (where she works as an assistant professor at the University of Southern California). When she traveled to Glacier National Park, she saw an ad for activities in Montana, and when she went on a work trip to Cambridge, Massachusetts, she saw an ad for a ceramics school there. Facebook was continuing to track Korolova's location for ads despite her signaling in all the ways that she could that she didn't want Facebook doing that.

[...] "There is no way for people to opt out of using location for ads entirely," said a Facebook spokesperson by email. "We use city and zip level location which we collect from IP addresses and other information such as check-ins and current city from your profile to ensure we are providing people with a good service -- from ensuring they see Facebook in the right language, to making sure that they are shown nearby events and ads for businesses that are local to them."

This discussion has been archived. No new comments can be posted.

Turning Off Facebook Location Tracking Doesn't Stop It From Tracking Your Location

Comments Filter:
  • by Anonymous Coward

    There is no way for people to opt out of using location for ads entirely [unless you spoof your IP address via a mixer network such as Tor].

    • by Thud457 ( 234763 ) on Tuesday December 18, 2018 @04:18PM (#57826472) Homepage Journal
      I am disgusted by your half-measures and find them to be ideologically impure.
      The obvious only response to "There is no way for people to opt out of using location for ads" is DON'T USE FACEBOOK.


      The only useful purpose Facebook serves is a list for the great telephone sanitizer purge.

      /s on this whole post because good god, look at what we have been reduced to
      • by Penguinisto ( 415985 ) on Tuesday December 18, 2018 @04:35PM (#57826574) Journal

        Pretty much this... I managed to prevent FB from knowing where I am by removing (and previously disabling) the stupid app off the phone.

        If I actually needed to be in Facebook, I'd just use the mobile browser and kill that tab before I closed it.

        • They still track you via the websites you visit with "like" buttons.

          • That's why I have a separate browser just for facebook for the few times I use it...

            Some people I know use firefox multi-account containers to separate the browsing together with multiple ad/script-block plugins.

            • by Anonymous Coward

              nope. it's them little facebook thumbs on 3rd party pages tracking you.

        • Comment removed based on user account deletion
      • Re: (Score:2, Informative)

        by Anonymous Coward

        All I have to do is connect my tablet to a wi-fi node, and Google knows my location within 50-100 feet. This even though location services and GPS are turned off. While Google is updating their maps, they are also collecting data on all of the wi-fi nodes that they detect, coupled with GPS location data. So when you connect to any wi-fi node, they know where you are by what wi-fi nodes that your phone or tablet can see.

        I almost never use my tablet, and a big part of that is that Google (and many apps) t

      • Typically reiterating the Free Software Foundation [fsf.org] (from 2010) or Richard Stallman's sentiments [stallman.org] (dating back to 2011 and revised as news is published) doesn't go over well on corporate media tech sites. And then bad things happen and people eventually come around to realizing that the more principled approach (and attendant conclusions) was foreseen years ago.

    • The person is making it abundantly obvious that they don't want to be tracked. Facebook (and Google) are what I've come to refer to as information rapist. A rapist doesn't understand that no means no, and neither do these two entities.
    • by Anonymous Coward

      If FB goes by IP address, that is all well and good. Best defense there is a VPN. This is what I use to deter location based ad slinging, and it seems to be effective, as FB can only get back the VPN's IP range.

    • by bws111 ( 1216812 )

      Which does not stop you from gettings ads, you just get ads for the wrong location.

      • Which does not stop you from gettings ads, you just get ads for the wrong location.

        That's fine, I find that funny, and it is satisfying to know that the admen are wasting effort on me and that their data well is poisoned. Almost as good as getting a live sales phonecall - my pretending I'm interested then leaving the handset on the table squawking away for the next 5 minutes to no-one.

        For some reason ads on the web have got the idea that I live in Uxbridge, a suburb of London 200 miles from me, and that I need laser surgery on my eyes. That's just funny, not that I see ads very often any

    • Facebook has a fully functional .onion address.

  • Apps that aren't running have a real hard time tracking where you are. Maybe spend less time telling your friends about your lunch and less time actually enjoying your lunch for yourself? And how badly do you really need to know the favorite coffee shop bathroom of your high school best friend's mom's sister's dentist's mechanic's veterinarian's daughter? Can't you wait to learn that later?
    • by Shotgun ( 30919 ) on Tuesday December 18, 2018 @04:20PM (#57826486)

      Apps that aren't installed have an even harder time tracking you.

      • You hardly need to download anything to be tracked. The phone does it on its own. You cannot turn off location tracking without turning off your phone and removing the battery.

      • Apps that aren't installed have an even harder time tracking you.

        Good luck finding a smartphone that doesn't have facebook pre-installed in a way that prevents uninstallation. You can of course choose to not use it (and even go so far as to never sign in to it) but finding one that doesn't have it is nearly impossible.

        • by DarkOx ( 621550 )

          Have you tried an iPhone; they are quite popular; and quite free of facebook OOB.

        • Apps that aren't installed have an even harder time tracking you.

          Good luck finding a smartphone that doesn't have facebook pre-installed in a way that prevents uninstallation. You can of course choose to not use it (and even go so far as to never sign in to it) but finding one that doesn't have it is nearly impossible.

          My Kyocera Hydro VIBE [kyoceramobile.com] didn't come with the Facebook app.
          I'm sure there are many second-tier phones (ie: not iPhone or Galaxy, etc...) w/o Facebook pre-installed.

        • by dryeo ( 100693 )

          My cheap Moto E didn't and doesn't have Facebook on it. The only extras were a file manager, FM radio app and a lost device locator app, none of which run in the background, well the FM radio can.
          It does have too much Google crap on it though.

        • My Windows phone (Nokia Lumia 950) doesn't have an FB app, and never did.

        • Good luck finding a smartphone that doesn't have facebook pre-installed in a way that prevents uninstallation. You can of course choose to not use it (and even go so far as to never sign in to it) but finding one that doesn't have it is nearly impossible.

          Easy, and wrong, respectively. Also, irrelevant. You can disable apps so they don't function. But also, it's trivial to find such a phone. Just buy one that hasn't been raped by a carrier. They don't have any non-removable bundled apps. Also, it's irrelevant because you're already a fool if you buy a phone whose bootloader you can't unlock, so that you can replace the OS install entirely. If you can't be arsed to do the research ahead of time, you'll get what you deserve.

      • by morethanapapercert ( 749527 ) on Tuesday December 18, 2018 @05:26PM (#57826906) Homepage
        As I said above just a moment ago, it's not the app in question that is the problem. The offending app is just one spy among a myriad others that the database compilers partner with. Facebook collects data not only from its own app and site, but also through leasing access to 3rd party geolocation and demographic database providers. So even if you delete the Facebook app and archive your Facebook profile (you can't really delete a profile as easily as you might think) Facebook can and does still track you. Here is the scary part: Facebook is still tracking you and compiling profile information on you even if you have never interacted with Facebook or their services before

        There are only a handful of geolocation and demographic database providers and all of them have numerous data feeds. A rough rule of thumb is that if you are using any free digital based service (Air Miles, store loyalty cards, branded credit cards etc) then these companies know who you are and a scary amount about your shopping habits and normal movement patterns.

        As in the world of counter-inelligence, the problem isn't the spy. It is the intelligence agency that employs the spy. It's just that the spy happens to be one thing you might catch and defeat. Good counter-inel isn't just making sure you have no spies in your camp. It is also things like making sure none of your people leave useful information left laying around and carefully feeding false information to the other side. Thing is, that is very hard to do even for very good intelligence agencies. It is hopeless to think of the general mass of humanity (most of whom don't care) achieving the same level of vigilance.

    • by morethanapapercert ( 749527 ) on Tuesday December 18, 2018 @05:15PM (#57826832) Homepage
      I could be wrong about this, but it's my understanding that just because the app isn't open and being used doesn't mean that all components of it are static data in storage. While messing around in the various settings and controls on Android mobile devices, I noticed a curious thing. Go to the apps list, tap any app that you have installed. You'll be given two choices for that app: Uninstall and Force Stop. Force Stop can be greyed out for many of the apps that were pre-installed and the manufacturer judged to be important to basic function of the device. For everything else, clicking that button then changes it to a greyed out state. One would have to assume that if you're given a Force Stop button and it changes state when you use it, then it is actually doing something "under the hood"

      Of course, the benign possibility is that the app has some kind of monitor process that phones home occasionally to check for updates. (home being defined as either the app store or the developers own systems) But making that background process also track your location and report that in any of several ways should be trivial for any app developer skilled enough to meet the inclusion criteria of the Android or Apple app stores.

      For companies like Facebook and pretty much every free mobile game out there, their entire business model is providing you with a service only as an opportunity to gather every possible scrap of data on you. Just because your phone isn't passing along what it knows about your location doesn't mean that the background app can't determine where you are through a number of other methods. It just means the level of certainty drops a tiny bit.

      For example, you go to your favourite caffeine dispensary where they also happen to have free Wi-Fi. You happen to have $shiny_app installed but don't allow it to know your location. But it can still get identifying data for radio sources through the Wi-Fi, Bluetooth and possibly the NFC reader (aka S Beam in Samsung phones, many other phones have something similar). The background process I described already gathers that info and then phones home with that radio finger print. The $shiny_app developer has a data base, purchased from a 3rd party, which lists millions of such fingerprints. Thanks to numerous other mobile users who haven't disabled location data on their devices, the database has a pretty clear idea of where each radio fingerprint is physically located.

      It's important to note that deleting an offending app won't solve the problem. MOST of the apps you have installed will be doing this and there are only a handful of providers of that third party geolocation database. Thus the 3rd party database company has dozens, even hundreds of informants at any given time, compiling really massive amounts of data. To me, it is those 3rd party database providers that are the real and pernicious privacy threat.

      As far as I know, these data analytic companies collect FAR more than just geolocation data. Many of them also cooperate with programs like Air Miles, store loyalty cards and so on. Which means that not only do they know where you are pretty much in real time, there's a good chance they know your name, credit score, banking information, shopping habits and place of employment. And while there is a tiny minority of people who actually worry about protecting their privacy from these apps (like a majority of slashdotters), very few seem to be taking a step back and worrying about the big picture.

      What we need is a way to make protecting privacy more profitable than violating it but I'm certainly not the genius who will come up with one.

    • by hey! ( 33014 )

      Apps that aren't running have a real hard time tracking where you are.

      No they don't. Not if by "running" you mean having some kind of user-facing UI. Apps run services in the background all the time and yes, they collect information about where you are.

      The line between app and malware is shockingly blurry, since app vendors fell free to collect, transmit and share data about you without your awareness.

  • by Anonymous Coward

    [quote]
    "There is no way for people to opt out of using location for ads entirely," said a Facebook spokesperson by email.
    [/quote]

    There most certainly *IS* a way to opt out. UNINSTALL THE DAMN APP!

  • IF you are tracking my I-phone by it's IP, I spend a lot of time in downtown Dallas.. If you track my Facebook access from home, it's going to tell you I'm in the Carrolton Texas area. Both are about 25 miles from my ACTUAL location.

    However, there are more ways to give up your physical location than accessing Facebook. Take a picture and share it with your mobile device? (They are usually GEO tagged by your device). Run some "GPS" application to get driving directions? Actually have it turned on and pi

    • And don't forget radio signal fingerprinting. There is the cell tower, the free Wi-Fi at your favourite coffee shop, Bluetooth, S beam (or equivalent) and NFC . As I've said above, demographic and geolocation companies use more sources of information than just the apps you chose to install. Check your email at Starbucks? One of your apps, maybe even a vendor installed and non-removable app reports your location. Pay using your phone? The credit card company might be sharing your location into. Use Air Miles
      • AFAIK, it's never been done... but if you had low-level programming access to the radio in an 802.11ac chipset (enough to detect TDWR radar bursts as they sweep by) and a source of extremely accurate timestamps, you could probably combine that with tower data and external data-aggregators (who, among other things, would have to monitor the radar beam's sweep) and obtain EXTREMELY accurate location data, even without involving GPS or wi-fi at all, and even if you were in an area that had access to only a sin

        • I'm no radio engineer, but it seems to me that you could duplicate some of that functionality without having to dive down to bare metal in your exploit. There are already "network analyser" apps for mobile devices. Those provide signal to noise ratio information already. Rain kills signal through two methods that I know of, simple attenuation and increased backscatter. If you already have clear weather reports from that already established location, a simple statistical comparison to your baseline (harveste
  • Really. After Cambridge Analytica. After the call log confessions. You still let Facebook on your phone ... and you're concerned about IP tracking? Seriously people.

  • `` `There is no way for people to opt out of using location for ads entirely,' said a Facebook spokesperson by email.' ''

    Come on, people. The solution doesn't involve rocket science or new laws. If their ads bother you, just stop using Facebook on your phone. You can use FB Purity to avoid seeing the ads but you'll still be tracked. So just remove the damned application from your phone.

  • Apart from the obvious option of deleting your Facebook account, a good VPN should probably be able to obfuscate your IP address effectively enough to prevent this kind of tracking, surely?
    • No. They will just get the data from your wireless provider.
    • Re:VPN? (Score:5, Interesting)

      by morethanapapercert ( 749527 ) on Tuesday December 18, 2018 @06:01PM (#57827090) Homepage
      A VPN only masks your IP from the destination web site and the routers your packets pass through. Your phone always knows where you are. It knows what cell towers are in range and relative signal strength from each, that right there can locate you within a hundred meter radius or so. The Android and Apple OS'es themselves know your location from the Cell towers, GPS (accurate within 8 meters) available Wi-Fi sources (~50 m), Bluetooth(100m), NFC (10 cm) and things like Samsungs S-beam (combines NFC and Wi-Fi). By combining these sources of location data, you can come up with a surprisingly accurate estimate of location for a given device. After all, even if you don't use Apple pay (for example) your phone can still "see" the Apple Pay reader device on the Starbucks counter while you're paying for your latte with cash. That device location is known and certainly isn't prone to moving around much.

      None of that can be completely disabled. This information then gets shared with a handful of OEM apps and the application stores. On the back end, there are a handful of demographic and geolocation data base providers collating, cross referencing and compiling all the data from a myriad sources. Some of those sources include data like name, address and phone numbers. (shopper loyalty cards, Air Miles, store specific free draws etc)

      Having Facebook know where you are at all times and showing you ads based on what they know about you is scary enough. But it gets worse when you realize that Facebook is tracking you and adding you to the databases they use even if you've never been a Facebook user. The real worst though is that these backend databases aren't really subject to any oversight and are accessible to any one willing to sign a contract with the analytics company. From time to time and in various places, laws have been passed that say marketers cannot collect certain kinds of information in certain ways or do certain things with that information. But it is rare for a law to take a holistic approach, starting with privacy and working from there. And I've NEVER heard of a law that banned certain data practices and required that all existing data gathered that way be purged

      • Surely not using the app but accessing Facebook through a browser and VPN will give you at least some level of concealment of your movements? I'm not a Facebook user but I do most of my browsing (desktop and mobile) using ProtonVPN always through the same server, so to anyone who wants to track me that way it looks as though I'm always in the same city.

  • I'm ok with IP based tracking, my IP stays static anywhere in my local metro are, so all they know is what city I'm in (and often that's not even accurate for small towns).

    If I really want to hide it, I can use a VPN.

    What I don't like is the GPS or Wifi SSID tracking which is much more granular and harder to mask. I almost never give apps that permission. I once tried a free flashlight app that wanted location permission and ability to read my contacts, I've been very selective about what apps I install aft

    • A VPN only masks your IP from the destination web site and the routers your packets pass through. Your phone always knows where you are and shares that info with your carrier, OEM and application store, just for starters.
      • by hawguy ( 1600213 )

        A VPN only masks your IP from the destination web site and the routers your packets pass through. Your phone always knows where you are and shares that info with your carrier, OEM and application store, just for starters.

        Yes, I know, that's why I'm ok with IP based tracking, but not GPS or Wifi SSID tracking, and I'm very selective over what apps have location access -- I know Google and my carrier know my location, but that's unavoidable, I'm not so principled that I'd give up a smartphone entirely.

  • by 110010001000 ( 697113 ) on Tuesday December 18, 2018 @04:20PM (#57826488) Homepage Journal
    Duh, they know your previous locations and use that as fallback. They also know your IP address. Your network provider always knows your location and might sell that data to advertisers as well. Your phone IS a location tracking device. It has to be in order to work properly.
  • Re: (Score:2, Informative)

    Comment removed based on user account deletion
    • by Solandri ( 704621 ) on Tuesday December 18, 2018 @05:08PM (#57826774)
      Facebook has entered agreements with most if not all the major cellular carriers and phone manufacturers to pre-install the Facebook app on your phone. You can't uninstall it. You can disable it, but I've been fighting another preinstalled app called Facebook App Manager which you can't disable. It seems to be re-enabling the Facebook app (every week or so it's active again and has auto-updated to the latest version). I'd been putting off rooting the phone since it voids the warranty, but I think I'm going to have to punt the warranty and root just to kill stupid crap like this.

      Facebook is well known for tracking you even if you don't have a Facebook account. Those little 'f' icons you see on websites? They're not an icon; they contain a script which gathers info to uniquely identify your browser, then reports which page you visited back to the mothership. They create a ghost profile for you, then link it to your real identity if they ever get corroborating evidence (e.g. friend sends you a link to their FB page to your email, thus linking your email address with the ghost profile). And if your friend has tagged pictures they took of you, they know what you look like. And now with their app reporting your movements, they know where you live and work and like to hang out. All without you ever creating a Facebook account. I'm approaching the opinion that the only way to deal with them is to nuke them from orbit.
  • by Anonymous Coward

    They take privacy, seriously.

  • > "ensuring they see Facebook in the right language"

    That has nothing to do with location and everything to do with the user. Just because I might be in Frankfurt doesn't mean I want to see content in German.

  • First they repealed Net Neutrality, and a year after that, this is happening. How many people have we lost this year to pre-existing brain cancer caused by cell phones, because evil ISPs have teamed up with Facebook to use IP tracking to block people from accessing their local Obamacare online exchanges? Not that it really matters. We're all doomed thanks to global warming. And when we go, nature will start over. With the bees, probably. Nature knows when to give up.
  • Yes there is. Delete Facebook. Stop using it.

    Stop letting them sell your life as their product.

  • You should always be using a VPN and if possible TOR, across all your platforms. VPN's have become so common place that even technology illiterate people know they should be running one. A website should be allowed to track what you let them, and if you give them your IP without any filtering, they should be collecting that and preforming analytics on it. In my case Facebook gets confused constantly as my VPN switches my location every 15 - 30 minutes, and it notices, usually kicking me out and asking me
    • by KlomDark ( 6370 )

      How to know which VPNs are trustable and not just a honey pot for some unscrupulous operator that sells your info anyway?

  • remember when geoip was like the fancy new shit just becoming mainstream in teh intarweb? and then a few months later your boss heard about it and all the sudden wanted it in all the things? 1995 was nuts.
  • ... the worse Facebook looks.
  • The vendor accumulating GPS location datapoints in order to do something, that's "tracking" and should be able to be circumvented. If the vendor notices the IP you're at to provide more localized service and then immediately forgets where you are, I wouldn't call that "tracking" - not to mention that IP addresses are not particularly good location correlates.

    I know it's fun to bash Facebook, but if this assistant professor is so paranoid, why is she on Facebook at all? This article is nothing but troll bait

  • by sinij ( 911942 ) on Tuesday December 18, 2018 @05:18PM (#57826856)
    Obviously, you wouldn't get non-consensualy tracked by Facebook if you didn't dress that way.
  • This whole thing is just a misunderstanding of what the location permission on the smart phone does (and does not). You can bet your sweet bippy pretty much everyone does some sort of IP location based correlation. That's why you should never give your Ip address out on the Internet. Try opting out of that.
  • by nospam007 ( 722110 ) * on Tuesday December 18, 2018 @05:28PM (#57826920)

    ...and then complain that they know where they live?

  • The ads have to ad (Score:4, Informative)

    by AHuxley ( 892839 ) on Tuesday December 18, 2018 @06:12PM (#57827146) Journal
    Thats the people who pay for using social media get.
    A setting on some "GUI" will not change the ads.
    The users are the product and cant escape with a setting in a GUI.
  • Who would have thought that web servers hosting text and images would *gasp* get your IP address...

    It's not like we have any geo location technology to find out location by IP or anything, especially here in the US.

  • Facebook knows where she lives. Did she really think that it would forget just because she isn't being tracked currently? If she goes on vacation elsewhere and FB starts sending ads tied to that location let us know, but her "proof" that they are still tracking her is not proof at all.
  • "... we collect from IP addresses... to ensure we are providing people with a good service -- [like] ensuring they see Facebook in the right language"

    Riiiiiiiiiiiight. Because I should always be served ads in whatever language I'm geographically surrounded by, rather than the language I speak natively and could easily specify via preference. I *totally* buy it.

  • Use a VPN and connect to a server in another State (or even another country). You should be using a VPN anyway just to be on the safe side.

  • Want make my blood boil then say stupid shit like " We use city and zip level location which we collect from IP addresses and other information such as check-ins and current city from your profile to ensure we are providing people with a good service -- from ensuring they see Facebook in the right language ". The right language is NOT related to where I am, it related to my OS and browser. It pisses me off that some smart ass has decided that because I am visiting some countries that I have instantly beco
  • Many companies do this too. :(

  • Comment removed based on user account deletion
  • The solution to this problem is quite simple. Start by taking out your sim (if you have one) snap it in half. Throw your phone on the ground, and smash it. Now buy a dumb phone. You won't be able to access facebook, but then you won't get adds and if the phone is dumb enough it won't even have GPS capabilities. Problem solved.

"Engineering without management is art." -- Jeff Johnson

Working...