TikTok's Oracle Migration Gave ICE a Surveillance Backdoor

The "Americanization" of TikTok didn't protect your data from China. It handed it to Oracle, a company that already sells surveillance tools to ICE.

TL;DR: TikTok's "Americanized" data now sits on Oracle's cloud infrastructure, a company with multibillion-dollar intelligence and law enforcement contracts. Every time you open TikTok, your phone broadcasts a Mobile Advertising ID (MAID) with GPS coordinates to ad bidders. Data brokers like Venntel and Babel Street harvest these into searchable movement databases that ICE buys: no warrant required. The Americanization didn't protect you from surveillance. It moved your data closer to it.

Remember when Congress forced TikTok's sale to "protect Americans from Chinese surveillance"?

On February 9, The New Republic laid out what actually happened: TikTok's data migrated to Oracle's cloud, a company whose founder Larry Ellison is a major Trump donor and whose multibillion-dollar business depends on U.S. intelligence and law enforcement contracts.[1]

The Chinese surveillance threat was real. But the fix didn't stop surveillance. It redirected it.

How Your TikTok Data Becomes ICE Intelligence

Here's the pipeline, step by step.

Every smartphone has a Mobile Advertising ID, or MAID: a unique alphanumeric tag assigned by Apple or Google. When any app displays an ad, your MAID gets shared with thousands of bidders in real-time auctions. If you've got location services on, your precise GPS coordinates go with it.[2]

Data brokers like Venntel and Babel Street sit in those auctions. They don't buy ads. They buy the bid-stream data (the GPS pings, the timestamps, the device IDs) and compile it into massive searchable databases of human movement.[3]

ICE buys access to those databases. Customs and Border Protection signed contracts with Venntel worth over $2 million in 2019 and 2020.[4] When the ACLU obtained records through FOIA, they confirmed DHS was using commercially purchased location data to circumvent the warrant requirements established by the Supreme Court in Carpenter v. United States (2018).[5]

TikTok is now part of this data pipeline. Its updated January 22 privacy policy enables precise GPS collection for U.S. users, a capability previously blocked. That GPS data feeds the same ad ecosystem that feeds the same data brokers that feed ICE.

The Oracle Problem

This isn't about one app being secretly evil. It's about architecture.

Oracle's cloud hosts TikTok's American data through TikTok USDS Joint Venture LLC. Oracle also has deep, longstanding contracts with the Department of Defense, the CIA, and federal law enforcement. The company's entire government services division exists to process sensitive data for national security clients.[1]

That doesn't mean Oracle is piping TikTok data directly to ICE. But it means the infrastructure serving your For You page sits on the same corporate backbone that serves federal surveillance programs. As The New Republic's Logan McMillen put it: the government "put user data on the government's credit card."[1]

And Oracle doesn't need to share TikTok data directly. The ad ecosystem does the work. TikTok shows you ads. Your MAID and GPS coordinates enter the bid stream. Venntel harvests them. ICE searches them. No warrant. No subpoena. No court oversight.

Palantir's ELITE: Where the Data Lands

Once ICE has location data from ad-tech brokers, it feeds into Palantir's ELITE platform: Enhanced Leads Identification & Targeting for Enforcement.

In January 2026, 404 Media published the ELITE user guide, obtained from internal ICE materials.[6] The tool generates neighborhood maps dotted with potential deportation targets, pulls up individual dossiers with photos and addresses, and assigns "confidence scores" to each target's location. ELITE pulls data from the Department of Health and Human Services (including Medicaid), government databases, and commercially purchased datasets.

The tool integrates with Flock license plate readers and Amazon Ring camera footage, creating what amounts to a digital panopticon.[6] ICE agents can track targets without physically being present, and without a warrant for the commercially purchased data component.

The Third-Party Doctrine Loophole

The legal justification for all of this rests on the third-party doctrine: a 1970s legal principle holding that you lose your "reasonable expectation of privacy" when you share information with a third party.

In 2018, the Supreme Court cracked this open with Carpenter v. United States, ruling that the government needs a warrant to access cell tower location data. But Carpenter left a gap: it didn't address what happens when the government buys location data commercially.[1]

That gap is now a highway. ICE doesn't need to subpoena your phone records. It buys equivalent data from data brokers who harvest it from the ad ecosystem. Your apps, including TikTok, feed that ecosystem every time they display an ad.

Portland: What This Looks Like on the Street

In February 2026, an ICE agent in Portland, Maine photographed a constitutional observer (a person legally monitoring immigration enforcement activity) and told her she was being added to a "database" of "domestic terrorists."[1]

That's not a hypothetical. That's a federal agent using surveillance tools against a U.S. citizen exercising her First Amendment rights. The same infrastructure that tracks your TikTok scrolling creates the digital dossiers that make encounters like this possible.

The Suppression Layer

There's another dimension. TikTok's content moderation infrastructure (shadow bans, algorithmic throttling, recommendation suppression) gives whoever controls the platform the ability to limit what goes viral.

After the January 2026 ICE shooting in Minneapolis, users reported anti-ICE videos receiving zero views or being flagged as "ineligible for recommendation."[1] TikTok attributed the disruption to an Oracle data center power outage.

Whether that's true doesn't matter as much as what it reveals: the same company hosting the data can throttle the content. Surveillance and suppression on a single platform.

Congress Knows. Congress Hasn't Acted.

The fix exists on paper. The Fourth Amendment Is Not For Sale Act would prohibit law enforcement from purchasing data that normally requires a warrant or court order. The House passed it with bipartisan support in April 2024 by a vote of 219-199.[7]

It died in the Senate. No 119th Congress version has advanced.

Meanwhile, Senator Markey's ICE Out of My Face Act, introduced on February 5, 2026, would ban ICE and CBP from using facial recognition and biometric surveillance. It would also require deletion of all biometric data already collected.[8] That bill faces the same Senate wall.

What You Should Do

  1. Disable TikTok location access: Settings > Privacy > Location Services > TikTok > "Never." This stops GPS from entering the bid stream.
  2. Reset your Mobile Advertising ID: On iPhone: Settings > Privacy > Tracking > toggle off "Allow Apps to Request to Track." On Android: Settings > Privacy > Ads > "Delete advertising ID."
  3. Limit ad personalization on TikTok: Profile > Settings > Privacy > Ads Personalization > toggle off.
  4. Use a VPN: It won't stop MAID tracking, but it obscures your IP-based location from the app itself.
  5. If you're at risk: If you're undocumented, a protest organizer, or involved in immigration advocacy, consider whether TikTok is worth the surveillance exposure. Delete the app entirely if you can.

None of these steps make you invisible. The ad-tech surveillance pipeline is built into how smartphones work, not just how TikTok works. But cutting location access and resetting your advertising ID closes two of the biggest pipes.

References

  1. The New Republic - How TikTok 2.0 Became a Weapon for ICE (February 9, 2026)
  2. Krebs on Security - The Global Surveillance Free-for-All in Mobile Ad Data (October 2024)
  3. Vice - How an ICE Contractor Tracks Phones Around the World
  4. ACLU - DHS is Circumventing the Constitution by Buying Data It Would Normally Need a Warrant to Access
  5. Carpenter v. United States, 585 U.S. 296 (2018)
  6. 404 Media - 'ELITE': The Palantir App ICE Uses to Find Neighborhoods to Raid (January 2026)
  7. ACLU - House Passes Fourth Amendment Is Not For Sale Act (April 2024)
  8. Rep. Jayapal - ICE Out of My Face Act Introduction (February 5, 2026)