ICE Tracks Phones Without Warrants

A tool called Webloc turns your apps into immigration surveillance.

Smartphone displaying a map with location pins on a dark surface

TL;DR: Immigration and Customs Enforcement (ICE) is using a surveillance tool called "Webloc" to track the location of millions of mobile phones, without a warrant. Webloc collects billions of location signals daily from data brokers who obtain it from apps on your phone. ICE agents can trace anyone's movements over time, identify home addresses from work locations, geofence specific areas, and build comprehensive movement profiles. The government argues it doesn't need a warrant because you "voluntarily" shared your location with apps. Legal experts call it a Fourth Amendment bypass. ICE promised to stop buying location data in 2024. They didn't.

What Is Webloc?

Webloc is a phone surveillance tool sold by Penlink, a company that acquired the Israeli surveillance firm Cobwebs Technologies in 2023. ICE has spent millions on Penlink's suite of surveillance products.[1]

Here's how it works:

  1. Apps on your phone collect location data: Games, weather apps, shopping apps, navigation tools. Most people grant location access without thinking.
  2. That data flows to mobile advertising brokers: Companies aggregate billions of location "pings" daily from hundreds of millions of devices.
  3. Webloc buys access to this data: Then provides ICE agents with a searchable database of movements.
  4. ICE tracks without a warrant: No judge, no probable cause, no oversight.

The system can filter by advertising identifiers (like Apple's IDFA or Google's AAID), GPS coordinates, Wi-Fi signals, or IP addresses. It tracks how many days a device visited a location and average time spent there.[2]

What ICE Can Do With Webloc

Trace Home Addresses

See where a phone sleeps at night. Identify family members by co-located devices. Map social networks through physical proximity.

Track Movement History

Visualize months or years of someone's path through the world. Workplaces. Churches. Clinics. Everywhere they've been.

Geofencing Operations

Draw a box around any location: a workplace, a protest, a community center. See every phone that was ever there.

Pattern Analysis

Identify daily routines. Predict future locations. Know where someone will be before they get there.

Webloc integrates with another Penlink tool called "Tangles" for social media monitoring. ICE can correlate your physical movements with your online posts. Your tweet from a coffee shop? They know you were there.[3]

The "Data Broker Loophole"

Here's the legal sleight of hand: The Supreme Court ruled in Carpenter v. United States (2018) that tracking someone's phone location requires a warrant. That was a victory for the Fourth Amendment.

But the government found a workaround.

Instead of tracking phones directly, agencies buy the same data from commercial brokers. Their argument: You "voluntarily" shared your location with apps, so you have no expectation of privacy in that data. The third-party doctrine says information shared with third parties loses constitutional protection.[4]

Civil liberties groups call this a "data broker loophole": the government buying what it couldn't legally seize. The data is identical. The surveillance is identical. But paying a company for it supposedly makes it constitutional.

Senator Ron Wyden has called this "warrantless surveillance by credit card."[5]

ICE Promised to Stop. They Didn't.

In January 2024, the DHS Inspector General reported that ICE's purchase of commercial location data violated privacy policies and lacked proper legal safeguards. ICE pledged to stop buying telemetry data.[6]

They reversed course.

Public procurement records show ICE continues spending millions on Penlink surveillance tools, including Webloc. Contracts were renewed. New capabilities were added. The pledge was abandoned.[1][7]

This pattern repeats across government surveillance: Promise reform after public outcry. Wait for attention to fade. Resume surveillance.

Who Gets Tracked?

Webloc casts a wide net. Everyone with apps that share location data is in the database. That's most smartphone users in America.

But the targeting is specific:

  • Immigrant communities: ICE's primary mission. Location data helps identify workplaces, residences, and movement patterns for enforcement.
  • Activists and organizers: Geofencing protests, community meetings, and advocacy events creates lists of participants.
  • Religious communities: Location data reveals church attendance, mosque visits, and religious practice patterns.
  • Healthcare visits: Tracking phones at clinics exposes sensitive medical information without touching medical records.

The potential for abuse is staggering. A tool designed for immigration enforcement can target anyone in the database, which is nearly everyone.

The Companies Making This Possible

Penlink

Originally a telecommunications analysis company, Penlink acquired Cobwebs Technologies (an Israeli intelligence firm) in 2023. They now offer a complete surveillance package: phone tracking, social media monitoring, and data analytics. ICE is a major customer.[1]

Mobile Data Brokers

Webloc doesn't collect location data directly. It aggregates from brokers who collect from apps. Those brokers include familiar names like Gravy Analytics (now banned from selling sensitive location data by the FTC, but still operating) and dozens of smaller companies in the advertising ecosystem.[8]

App Developers

Every app that requests location access and monetizes through advertising is potentially feeding this system. Most developers don't know (or don't care) where their users' data ends up.

What You Can Do

Audit Location Permissions

Review every app on your phone. Most don't need location access. Revoke permissions aggressively. Settings → Privacy → Location Services.

Disable Advertising ID

iPhone: Settings → Privacy → Tracking → Turn off "Allow Apps to Request to Track"
Android: Settings → Privacy → Ads → Delete advertising ID

Use a VPN

A VPN masks your IP address, making IP-based location tracking less effective. Won't help with GPS, but removes one tracking vector.

Leave Your Phone Behind

For sensitive activities (protests, community organizing, legal consultations), consider leaving your phone at home or using a burner.

Demand Legal Reform

The Fourth is Not for Sale Act would require warrants for government purchase of location data. Support organizations pushing for passage.

Use Privacy-Focused Alternatives

GrapheneOS (Android). Signal (messaging). DuckDuckGo (browser). Apps that don't track by design.

The Bigger Picture

Webloc is one tool in ICE's expanding surveillance arsenal. They also use:

  • Clearview AI: Facial recognition from billions of scraped photos
  • Palantir ImmigrationOS: AI platform for targeting and tracking deportation candidates
  • Flock Safety cameras: License plate readers across thousands of neighborhoods
  • Thomson Reuters CLEAR: Database aggregating utility bills, credit reports, and vehicle records

Each tool alone is concerning. Together, they create a surveillance infrastructure where any identifier (your face, your car, your phone, your address) becomes a key to tracking your entire life.

The Fourth Amendment was supposed to protect against exactly this. But when the government can simply buy surveillance data, constitutional protections become optional.

Your phone is a tracking device. The question isn't whether the government can access your location. It's whether anyone will stop them.

References

  1. 404 Media - ICE Has New Tool to Track Phones Without Warrant (2025)
  2. EFF - ICE Surveillance Arsenal Expands (January 2025)
  3. Brennan Center - ICE Surveillance Programs Analysis (2025)
  4. Supreme Court - Carpenter v. United States (2018)
  5. Senator Wyden - Fourth Amendment Is Not For Sale Act
  6. DHS OIG - ICE Commercial Location Data Report (2024)
  7. WOLA - ICE Surveillance Technology Analysis (2025)
  8. FTC - Action Against Gravy Analytics (December 2024)