The Data Broker Loophole

Why You Should Need a Warrant (And Why They Don't Get One)

The Fourth Amendment is supposed to protect you from unreasonable government searches. If the FBI wants to track where you've been, who you've met with, what churches you attend, or which clinics you visit, they need to convince a judge there's probable cause to believe you committed a crime.

That's how it's supposed to work.

But in 1986, Congress passed the Electronic Communications Privacy Act. It put restrictions on phone companies and internet providers sharing your data with the government. Good law for its time.

The problem: data brokers didn't exist in 1986. App developers didn't exist. The companies that now hoover up your location from weather apps, games, and prayer apps? Completely unregulated.

So the government figured out a shortcut: why get a warrant when you can just swipe a credit card?

How the Loophole Actually Works

Here's the data supply chain that ends with the government knowing where you sleep:

Step 1: Your apps collect location data. Most smartphone apps request location access. Weather apps, fitness trackers, navigation tools, games, dating apps: they all want to know where you are. You probably clicked "Allow" without reading the terms of service.

Step 2: App developers sell your data to brokers. Companies like Venntel and Babel Street buy location data in bulk from app developers and advertising networks. They aggregate it into searchable databases containing billions of location points.

Step 3: Government agencies buy access. The FBI, ICE, DHS, and other agencies sign contracts with these data brokers. They pay for licenses to search databases that reveal where any device has been, without ever talking to a judge.

The legal theory? You "voluntarily" shared your location with the weather app. You have no "reasonable expectation of privacy" in data you handed over to a third party. So the government can buy it without a warrant.

It's the Fourth Amendment workaround that privacy lawyers call "constitutionally indefensible" but which courts have let slide for years.

Who's Shopping for Your Data

This isn't theoretical. Here's the receipt:

Department of Homeland Security: DHS has purchased cell phone location data since at least 2017. In February 2026, they signed a $1 billion contract with Palantir to deploy AI-powered data analytics across all DHS components, including Customs and Border Protection and ICE.

ICE: Immigration and Customs Enforcement uses Penlink's "Webloc" tool to track mobile phones and identify devices that have visited specific locations. They also have a $30 million contract with Palantir for "ImmigrationOS", a platform designed to track people for deportation with "near real-time visibility."

FBI: The Bureau signed a contract worth up to $27 million with Babel Street for 5,000 licenses to its Locate X product. When Senator Wyden asked FBI Director Kash Patel last week if he'd commit to not purchasing Americans' location data, Patel declined. The FBI "uses all tools," he said.

Customs and Border Protection: CBP paid Babel Street more than $2.7 million for an annual subscription to its social media and location tracking tools in 2019, plus another $265,000 in 2020. They also bought access to Venntel's location database.

U.S. Secret Service: Contract documents show the Secret Service purchased app-generated location data from Babel Street.

Treasury Department: The Office of Foreign Assets Control paid Babel Street $154,982 for access to location tracking capabilities in July 2021.

IRS: Yes, even the tax agency has purchased location data.

What They're Buying

Data brokers sell access to databases containing:

• Cell phone location data: Where your device has been, often with historical records going back months or years. This reveals where you sleep, work, worship, get medical care, and who you meet with.
• Browsing history: Which websites you visit, what you search for, how long you spend on each page.
• Ad tech data: Information collected through online advertising networks: what ads you've seen, what you've clicked, what products you've researched.
• Social media profiles: Babel Street's "Babel X" tool aggregates social media data for government analysis.
• Financial data: Transaction patterns, purchase history, payment app usage.

Anthropic CEO Dario Amodei warned Congress that combining this purchased data with AI could assemble "a comprehensive picture of any person's life, automatically and at massive scale."

How It's Been Used

This data has already been deployed against Americans:

Tracking Muslim communities: The Department of Defense purchased location data from a Muslim prayer app to monitor where observant Muslims gathered.

Tracking racial justice protesters: Law enforcement used purchased location data to track people who attended Black Lives Matter protests.

Tracking immigrants: ICE uses commercial location data to identify and track people for deportation proceedings.

Building AI surveillance systems: The purchased data feeds into machine learning models that predict behavior, identify patterns, and flag targets for investigation.

None of this required a warrant. None of it was reviewed by a judge. None of it showed up in the normal legal processes that are supposed to constrain government surveillance.

How Congress Could Close the Loophole

There are bills that would fix this. Whether they pass is another question.

The Government Surveillance Reform Act: Introduced by Senators Ron Wyden (D-OR) and Mike Lee (R-UT), along with Representatives Zoe Lofgren (D-CA) and Warren Davidson (R-OH), this bill would ban the federal government from purchasing Americans' data from data brokers without a warrant.

It would also require warrants to access Americans' communications collected under FISA Section 702, and repeal the 2024 expansion that allows the government to force businesses and individuals to secretly spy on its behalf.

The Fourth Amendment Is Not For Sale Act: Passed the House in April 2024 with bipartisan support (219-199). It would prohibit government purchases of data that would otherwise require a warrant. The Senate never voted on it before the last Congress ended.

FISA Section 702: Expires April 20, 2026. Privacy advocates want data broker reforms attached to any reauthorization. Senate Intel Chair Tom Cotton wants a "clean" extension with no changes.

130 civil society groups have urged Congress to close the data broker loophole. Seventeen state attorneys general, including California's Rob Bonta, sent a letter last week demanding the same thing.

The clock is ticking.

What You Can Do

You can't fully opt out of a surveillance system this pervasive. But you can reduce your exposure:

• Audit your app permissions. Check which apps have location access on your phone. Revoke permissions for anything that doesn't absolutely need to know where you are.
• Use a VPN. Encrypts your browsing traffic and masks your IP address from data collectors.
• Check data broker opt-outs. Some brokers let you request removal. It's tedious, but services like DeleteMe can automate part of this process.
• Use privacy-focused alternatives. Consider Signal instead of regular texting, DuckDuckGo instead of Google, Proton Mail instead of Gmail.
• Contact your representatives. The Government Surveillance Reform Act needs support. The April 20 FISA deadline creates a window for action.

The government is buying its way around the Fourth Amendment. The only question is whether enough people care to stop it.

Sources

• NPR: "Your data is everywhere. The government is buying it without a warrant"
• Brennan Center: "Closing the Data Broker Loophole"
• Senator Wyden: Government Surveillance Reform Act Introduction
• EFF: "How the Federal Government Buys Our Cell Phone Location Data"
• NBC News: "DHS spent millions on cellphone data to track Americans"
• SiliconAngle: "DHS awards Palantir up to $1B to deploy AI and data analytics platforms"
• Vice: "Secret Service Bought Phone Location Data from Apps, Contract Confirms"
• The Intercept: "The U.S. Treasury Is Buying Private App Data to Target and Investigate People"
• California AG: "Bonta Calls on Congress to Stop Government Mass Surveillance"
• EPIC: "Endorses Bipartisan Government Surveillance Reform Act"

Related Coverage

• FISA 702: 19 Days Left: The data broker loophole remains the key reform demand as the clock runs out
• 17 Attorneys General Tell Congress: Stop Federal Mass Surveillance Now: California AG Rob Bonta leads coalition demanding data broker reforms.
• Citizen Lab Exposes Webloc: 500 Million Phones Tracked via Ad Data: The definitive proof of how the data broker loophole works in practice
• Wyden-Lee Reform Bill: What the Government Surveillance Reform Act Would Change: Deep-dive on the legislation.
• FISA 702 Countdown: Congressional Deadlock With Days Until Sunset: The surveillance reauthorization fight where data broker reforms hang in the balance.
• Why Are Democrats Helping Trump Keep Warrantless Surveillance?: 23 days until expiration, some Democrats might enable a clean extension.
• DOGE Whistleblower: "God-Level Access" to Every American's Data: Another example of federal data access without oversight.
• Hungary Renewed Spy Licenses Before Election: The data broker loophole isn't just American. Hungary's intelligence service uses Webloc too.
• Alabama Makes It 21 States With Privacy Laws: Another state privacy law that doesn't close the government data purchase loophole.