146
A massive advertising surveillance network called Webloc was recently exposed for tracking the historical movements of over 500 million mobile devices. This data was being sold to private intelligence firms.

In this article

A massive investigative report released on April 9, 2026, by Citizen Lab has exposed the inner workings of Webloc, a global surveillance system that has turned the digital advertising industry into a warrantless tracking machine. The investigation revealed that law enforcement and intelligence agencies—from the U.S. military to local police departments—have been purchasing “ad-based data” to track the historical movements of up to 500 million mobile devices worldwide.

Your Apps are Informants

Webloc doesn’t need to “hack” your phone to know where you are. Instead, it harvests data from the Real-Time Bidding (RTB) ecosystem—the lightning-fast auction process that happens every time an ad loads in a mobile app.

When you open a weather app, a game, or a news site, your phone often broadcasts your Mobile Advertising ID (MAID) and precise GPS coordinates to hundreds of advertisers. Webloc ingests billions of these signals daily, allowing its users to “geofence” a specific neighborhood and see every device that was present there over the last three years.

The Death of Anonymity

While advertisers claim this data is “anonymous,” the Webloc report proves otherwise. By analyzing location patterns, the system can easily “de-anonymize” a device. If a phone spends every night at Address A and every day at Address B, the system identifies that person’s home and workplace.

For the first time, we are seeing “Ad-based Surveillance” used not just for marketing, but for building permanent, searchable movement histories of private citizens without a judge ever signing a warrant.

How iDefend Can Help

  • Tracking Protection: iDefend’s mobile suite includes a “Global Opt-Out” feature that signals to ad networks that you do not consent to the sale or sharing of your Advertising ID, significantly reducing your footprint in systems like Webloc.
  • Privacy VPN: Our 2026 VPN technology masks your device’s unique IP address and encrypts your “DNS queries,” preventing ad-tech firms from linking your web activity back to your physical location.
  • App Privacy Audits: iDefend scans the apps installed on your phone to identify “High Risk” trackers. We’ll show you exactly which apps are leaking your GPS coordinates to the ad exchanges that power surveillance tools like Webloc, and help you shut them down.
  • Location Guard: We provide guided setup to help you lock down “System Services” on your iPhone or Android, ensuring that your location is only shared when you choose, not when an advertiser wants it.