How a phone knows where it is
A phone does not rely on a single method. It combines several signals, using whichever are available and accurate enough for the task.
GPS and other satellite systems. The phone listens to signals from navigation satellites and calculates position from the timing of those signals. This can be accurate to a few metres in the open, but it works poorly indoors, in dense city streets or underground. Phones commonly use several satellite networks at once, so “GPS” is often shorthand for all of them. The phone only receives these signals, so satellites do not know where you are by themselves.
Wi-Fi. Phones can detect nearby wireless networks, even ones they never join. Providers keep large databases that map network names and hardware identifiers to approximate places. If your phone sees a known set of networks, it can estimate where it is, which is why Wi-Fi helps indoors and in cities. This can work even when you are not connected to any network.
Cell towers. Your phone connects to nearby towers, and the network knows which towers it is talking to. The mobile carrier can therefore estimate location, usually less precisely than GPS, depending on tower density. This is part of how mobile networks function, rather than a setting you control in an app.
Bluetooth. Nearby Bluetooth beacons or devices can help with indoor position, and some retail locations use them to detect visitors.
IP address. Websites can guess a rough area, often a city or region, from your IP address without any permission. It is a coarse estimate and can be wrong, particularly when a virtual private network or mobile network is involved.
Sensors. Motion sensors and barometers help fill gaps when other signals are weak, for example detecting which floor you are on.
Who can see location data
Several parties can learn where you are, in different ways.
- Your operating system provider often receives location data to power maps, search suggestions and device-finding tools. Settings usually allow you to limit history or turn it off.
- Apps with permission. Maps, ride-hailing, delivery, weather and fitness apps use location for an obvious reason. Others ask without such an obvious need.
- Websites, if you allow the browser to share your position when asked.
- Your mobile carrier, through the network itself.
- Advertising and analytics partners, if an app passes location on. Some of this data is gathered by data brokers and sold, sometimes after identifiers are stripped, although location trails can often still point to a specific person, since where someone sleeps and works is distinctive.
- Other people, through photos with location tags, shared journeys, or family-sharing features.
Why it matters
A single location is rarely sensitive. A history of locations can reveal a home address, workplace, regular appointments, religious or medical visits and who you spend time with. For that reason it is generally considered one of the more revealing categories of personal data, and worth treating carefully. It can also be a safety concern if shared with someone who should not have it.
How to review location access on a phone
Names vary between Android and iPhone and between versions, but the structure is similar. Look in Settings under Privacy, Location or Location Services.
- Check the master switch. You can turn location off entirely, though maps, emergency features and device-finding will then work less well. Most people prefer to manage it app by app.
- Review each app’s setting. Typical choices are:
- Never or Don’t allow
- Ask next time, or Ask every time
- While using the app
- Always
- Prefer “while using the app.” “Always” lets an app see your location in the background. Few apps genuinely need that. Navigation tracking, family locators and some smart-home routines are common exceptions.
- Consider precise versus approximate. Many phones let you share only an approximate area. A weather app does not need your exact street.
- Look at system services. There are usually separate toggles for things like location-based suggestions, significant locations, and location-based advertising. Review what each does before switching it off.
- Check location history and timelines. Some services keep a record of places visited. You can often pause it, set it to delete automatically after a period, or delete the existing history.
- Remove apps you no longer use. An unused app that still has permission is a pointless exposure.
The general principles behind these prompts are covered in the article on app permissions, and a wearable or fitness device may have its own location settings, as the piece on wearable data explains.
Other places location hides
- Photo metadata. Camera apps may embed coordinates in pictures. Turn off location tagging in the camera settings, or strip it when sharing; many social platforms remove it automatically, but you should not assume so.
- Social media check-ins and live sharing. Review who can see them.
- Browser permissions. Sites ask to use your location, and you can set the default to block or ask.
- Connected devices. Cars, trackers and smart speakers may record where they are used.
- Public Wi-Fi. Joining a network tells the operator roughly where you are.
What limiting it will and will not do
Switching off permissions stops apps from reading precise location, but the carrier still knows which towers you use, and your IP address still gives a rough position to sites. Perfect location privacy is not realistic with a mobile phone. A reasonable goal is to ensure that only apps with a good reason have access, only when they need it, and to revisit the list every few months, since updates and new installs can add permissions.