← Travel
D

Google Maps

Serious concerns
Google · 🇺🇸 United States
PolicyApp PermissionsNetwork TrafficFirmwareRegulatory
Technical details
App: com.google.android.apps.maps
Manufacturer: Google

⚠️ The bottom line

You opened Google Maps settings and turned off Location History. Google kept tracking you anyway. The Associated Press discovered that Google Search, Chrome, and even the Weather app continued recording your location after you turned off the setting Google told you controlled location tracking. Google's own engineers told the AP it was "practically impossible" to stop Google from tracking your location. Forty US states sued. Google paid $391.5 million. Arizona added $85 million more. The "off" switch was theater. Google always knew where you were. Google built a database called Sensorvault. It contained the precise location history of hundreds of millions of people going back a decade. Police discovered they could get a warrant and ask Google: who was near this crime scene at this time? Google received 11,554 of these "geofence warrants" in 2020 alone. Jorge Molina spent six days in jail for a murder he didn't commit -- his Google location data was the only evidence. A Florida man was accused of burglary because he biked past the scene. A Virginia man was jailed for a week and cleared. Google collected your location to "improve your experience." Police used it to arrest innocent people.

Legal jurisdiction
🇺🇸 United States (headquarters)
CLOUD Act read more →
US govt can demand your data from this company even if stored overseas
FISA §702 / PRISM read more →
NSA collects stored emails, photos, messages without individual warrants
Geofence warrants read more →
Police can demand location data for everyone near a crime scene
Spying
4/4 EXTREME
Is someone spying on me?
Data Sharing
3/4 HIGH
Who gets my data?
Security
0/4 N/A
Is it actually secure?
Honesty
4/4 EXTREME
Can I trust what they say?
REPLACE Extreme risk. Look for alternatives or lock down hard.
8Contradictions
3Critical
3High
2Medium
6Sources
Findings by concern
Spying 4/4 EXTREME 4 findings
⚠️ criticalpolicy claims vs third party research
Google built a database called Sensorvault. It contained the precise location history of hundreds of millions of people going back a decade. Police discovered they could get a warrant and ask Google: who was near this crime scene at this time? Google received 11,554 of these "geofence warrants" in 2020 alone. Jorge Molina spent six days in jail for a murder he didn't commit -- his Google location data was the only evidence. A Florida man was accused of burglary because he biked past the scene. A Virginia man was jailed for a week and cleared. Google collected your location to "improve your experience." Police used it to arrest innocent people.

What they claim: Google states it collects location data "to improve your experience" and "help you navigate and explore the world" while protecting user privacy.

What we found: Google's Sensorvault database -- revealed by the New York Times -- contained precise location data for hundreds of millions of users going back nearly a decade. Police across the US used this database to issue "geofence warrants" demanding data on every Google user near a crime scene during a specific time window. Google received 11,554 geofence warrants in 2020 alone. Jorge Molina of Avondale Estates, Georgia spent six days in jail for a murder he did not commit -- his Google location data was the only evidence against him. An innocent Florida man was accused of burglary because his Google data showed he biked past the scene. A Virginia man was arrested, jailed for a week, and eventually cleared after Google data falsely placed him near a crime. Federal courts began restricting geofence warrants, citing Fourth Amendment concerns. In December 2023, Google announced it would move Location History data to on-device storage -- widely interpreted as a response to geofence warrant backlash.

⚠️ criticalprivacy policy vs regulatory
$1.4 billion. Google told users turning off Location History would stop tracking. It didn't. A second toggle — "Web & App Activity" — kept tracking your location through Search, Maps, and other apps. Two switches that look independent but both track location. Turn off one, the other keeps watching. Google designed the confusion. Texas charged $1.4 billion for it.

What they claim: Google Maps describes location data as helping users navigate and discover places

What we found: Google settled with Texas for $1.4 billion in May 2025 — resolving lawsuits over biometric and location data collection without consent. Google had continued tracking users' locations even after they disabled Location History, using a separate "Web & App Activity" setting that most users didn't know existed. Two toggles, one purpose, designed to confuse.

⚡ highpolicy claims vs network analysis
Google calls it "Location History" as if it's one thing you can turn off. It's actually dozens of location data streams flowing from every Google product you use. Search records your location with every query. Chrome tracks you through Wi-Fi and IP data. YouTube logs where you watch. Photos tags where you shoot. Google built Sensorvault -- a database storing the movements of hundreds of millions of people for nearly a decade. You can delete your "Location History." You cannot delete your location from Google Search, Chrome, YouTube, Photos, Assistant, and every other product collecting it simultaneously. The off switch controls one faucet. The rest keep flowing.

What they claim: Google's privacy controls present Location History as a feature users can "manage, delete, or turn off at any time" with full transparency over what is stored.

What we found: The New York Times investigation revealed Google maintained Sensorvault -- a database of precise location records for hundreds of millions of users stretching back nearly a decade. Even after Google's 2024 announcement that Location History would move to on-device storage, other Google services continued collecting location signals. Google Search records location with every query. Chrome tracks location through IP and Wi-Fi data. YouTube, Google Photos, and Google Assistant all collect location metadata. The "Location History" toggle controlled only one data stream among many. Users who believed they had deleted their location history or turned off tracking had addressed one faucet while the rest continued flowing. Google's location data collection is not a single feature -- it is an architectural principle embedded across dozens of products.

⚡ highmarketing claims vs third party research
You leave a Google Maps review for your favorite restaurant. You're helping other diners. You're also placing yourself at a specific location on a specific date -- permanently, publicly. ICE has used Google data to track immigrants. Business owners have been doxxed through Maps listings. Researchers found the fake review economy is worth billions. Your review is a data point: where you go, when you go there, what you spend, what neighborhood you live in. Google calls it "sharing experiences." Surveillance researchers call it open-source intelligence.

What they claim: Google Maps promotes its review system as a way for users to "share experiences" and "help others make informed decisions" in a community-driven environment.

What we found: Government agencies and law enforcement have used Google Maps reviews and business data to identify and track individuals. ICE (Immigration and Customs Enforcement) has used Google data including Maps to locate and track immigrants. Business owners have been doxxed through Google Maps listings -- their home addresses exposed through business registrations tied to Maps. The review system has also been weaponized for harassment: coordinated fake review campaigns targeting businesses, review bombing during political disputes, and competitive sabotage. Harvard Business School researchers (Luca & Zervas) documented that the fake review economy around platforms like Google Maps is a billion-dollar industry. Your review of a local restaurant reveals your location, your habits, and your identity to anyone who wants to look.

Data Sharing 3/4 HIGH 2 findings
⚡ highmarketing claims vs regulatory findings
Google offered Incognito Mode. A Google engineer called it "effectively a lie." Google tracked users during "private" browsing and fed the data into its advertising system, including location-based targeting tied to Maps. A $5 billion class action lawsuit followed. Google agreed to delete billions of data points collected during sessions users believed were private. The little spy icon in the corner of your "private" tab was watching you the whole time -- and so was Google.

What they claim: Google Maps and Chrome offer "Incognito Mode" suggesting that user activity during these sessions is private and not tracked.

What we found: Google agreed to settle a $5 billion class action lawsuit (Brown v. Google) alleging it tracked users even while they used Chrome's Incognito Mode. The tracking fed Google's advertising system, including location-based ad targeting that relied on Maps data. Internal Google documents revealed employees joked about the misleading name, with one engineer calling Incognito Mode "effectively a lie." Maps data was part of the broader tracking ecosystem: location signals collected during "private" browsing sessions were incorporated into Google's advertising profiles. The settlement required Google to delete billions of data points collected during supposedly private browsing sessions and to more clearly disclose what Incognito Mode actually does -- and does not -- prevent.

⚫ mediumpolicy claims vs third party research
You delete your Google Location History. The timeline disappears. But the advertising profile built from your location data remains. The Google Photos tagged with your locations remain. The search queries that revealed your location remain. The anonymized analytics that included your movements remain. Forty state attorneys general found this misleading enough to extract $391.5 million. Deletion removes the view. It doesn't remove the knowledge. Google already learned where you go. Deleting the diary doesn't give Google amnesia.

What they claim: Google provides tools to "delete your Location History" and states deleted data is removed from Google's systems.

What we found: Even after users deleted Location History, Google retained location-derived data in other forms: ad targeting profiles built from location data persisted after deletion, location data embedded in Google Photos EXIF data remained, search queries containing location information were retained separately, and aggregated location analytics continued to include deleted users' data in anonymized form. The $391.5 million settlement with 40 states specifically addressed Google's misleading deletion practices. Researchers found that Google's location data ecosystem is so deeply intertwined across products that deleting "Location History" removed the timeline view but not the underlying location intelligence already extracted and distributed across Google's systems.

Honesty 4/4 EXTREME 2 findings
⚠️ criticalpolicy claims vs regulatory findings
You opened Google Maps settings and turned off Location History. Google kept tracking you anyway. The Associated Press discovered that Google Search, Chrome, and even the Weather app continued recording your location after you turned off the setting Google told you controlled location tracking. Google's own engineers told the AP it was "practically impossible" to stop Google from tracking your location. Forty US states sued. Google paid $391.5 million. Arizona added $85 million more. The "off" switch was theater. Google always knew where you were.

What they claim: Google stated that turning off "Location History" would prevent the company from storing a record of the user's movements.

What we found: An Associated Press investigation in August 2018 found that Google continued tracking and storing user location data even after users explicitly turned off the "Location History" setting. Other Google services -- including Search, Chrome, and the Weather app -- continued recording location. Internal Google employees told AP the company had made it "practically impossible" for users to prevent location tracking. In November 2022, Google agreed to pay $391.5 million to settle with 40 US state attorneys general over the misleading location tracking disclosures. Arizona secured an additional $85 million in a separate settlement. The investigation revealed that Google's "Location History" setting was essentially a decoy -- turning it off created the illusion of privacy while tracking continued through other channels.

⚫ mediumpolicy claims vs app permissions
Google Maps knows where you live. It figured it out from where your phone stops moving at night. It knows where you work -- same logic, different hours. It knows your commute route, your preferred coffee shop, how long you spend at the gym, and which bar you visit on Fridays. It detects your speed, your altitude, nearby Wi-Fi networks, and Bluetooth beacons. It auto-labels your "Home" and "Work." You never told it either address. A billion people carry this in their pocket every day. Google calls it navigation. It's a movement diary for a billion people.

What they claim: Google states it collects location data "to provide navigation and mapping services" and that users have "control" over their location data.

What we found: Google Maps collects: precise GPS coordinates, movement speed and direction, altitude, Wi-Fi access point data, cell tower identifiers, Bluetooth beacon proximity, places visited and time spent at each location, frequency of visits, home and work addresses (auto-detected from patterns), commute routes and timing, search queries for businesses and addresses, and route preferences. From this data, Google can determine: where you live, where you work, what time you leave and arrive, which route you take, how often you deviate, which shops you visit, how long you stay, whether you're walking or driving, and which other Google users are near you. The app knows more about your daily routine than your spouse does.

What happened to real people
Documented incidents involving Google products and user data.
Jorge Molina jailed 6 days for murder via geofence warrant based on Google Sensorvault location data. Lost job, car, reputation. Charges never filed. [source]
PRISM participant since 2009. NSA collects stored communications. FBI conducts warrantless 'backdoor searches' of American data using names and email addresses. [source]
Google received 180 geofence warrants per week by 2019. Each warrant searches tens of millions of accounts. Supreme Court hearing constitutionality (Chatrie v. United States). [source]
What your data is worth to governments
Google complied with 235,000 government data requests in H1 2024. That's +530% over 10 years. Google has been a confirmed PRISM participant since 2009. Under this programme, the NSA collects stored communications. The company is legally prohibited from telling you. Jurisdiction: US (CLOUD Act, FISA Section 702, Patriot Act).
Documented: Jorge Molina jailed 6 days for murder via geofence warrant based on Google Sensorvault location data. Lost job, car, reputation. Charges never filed.
Documented: PRISM participant since 2009. NSA collects stored communications. FBI conducts warrantless 'backdoor searches' of American data using names and email addresses.
What is PRISM? · What is the CLOUD Act? · Transparency report
Sources