What Carriers Hold and Share
Mobile carriers hold identity details, billing information and, uniquely, continuous location data generated as a phone connects to network towers. That location record exists regardless of app settings, because it is a function of the network rather than the handset.
Claims and enforcement have concerned the sale of that location data to aggregators, who resold access to downstream customers, in some cases reaching parties with no legitimate need and without meaningful subscriber consent.
Network location data is not an app setting
Turning off location services on a phone stops apps accessing GPS. It does not stop the carrier generating a record of which towers the device connected to, because that is inherent in how mobile networks operate.
The Legal Framework
Federal communications law protects customer proprietary network information, which includes location, and restricts its use and disclosure without customer approval. Enforcement in this area has centred on whether consent obtained through a chain of intermediaries was meaningful.
State consumer protection and privacy statutes apply alongside, and several provide statutory damages without proof of financial loss, which materially affects aggregate exposure.
Breach claims are pleaded as negligence and breach of implied contract, on the basis that customers paid for a service and reasonably expected proportionate safeguards for the identity data required to obtain it.
Protecting Your Account
Set a port-out PIN or account passcode with your carrier. This is the single most effective protection against SIM swap fraud, in which an attacker moves your number to their device and intercepts text-based authentication codes.
Move critical accounts from SMS-based two-factor authentication to an authenticator app or hardware key, since SMS is the weakest common method precisely because it depends on carrier account security.
SIM swap defeats text-based authentication
If an attacker moves your number to their device, every account secured by SMS codes becomes reachable, including banking and email. A carrier port-out PIN plus authenticator-app two-factor removes the great majority of that risk.
Free Legal Evaluation
Do You Qualify to File a Claim?
Our network of verified plaintiff attorneys offers free, no-obligation case evaluations. Contingency fee representation means you pay nothing unless you win.
Telecom Data Lawsuits: Location Data Sharing and Breach Claims: Frequently Asked Questions
Answers to the most common questions about this case and your legal options.
What location data do carriers hold?
Continuous records of which network towers a device connected to, generated by network operation rather than by apps or phone settings.
Does turning off location services stop this?
No. That controls app access to GPS. Carrier tower connection records are inherent in how mobile networks function.
What do location data claims allege?
That subscriber location data was sold to aggregators and resold downstream, in some cases without meaningful consent or legitimate need.
What law protects this data?
Federal communications law protecting customer proprietary network information, alongside state privacy statutes that sometimes provide damages without proof of loss.
How do I protect against SIM swap?
Set a port-out PIN with your carrier and move critical accounts from SMS codes to an authenticator app or hardware key.
Legal Disclaimer
This article is general legal information, not legal advice, and does not create an attorney-client relationship. Case status, eligibility criteria, and any amounts described are as reported at the date shown and may change. Consult a licensed attorney in your jurisdiction about your own situation.