In a significant victory for the privacy of people seeking abortion in the U.S., the Federal Trade Commission has issued a groundbreaking ban on the sale of individuals’ medical location data. The FTC settlement announced on Tuesday is the first of its kind and concludes the agency’s investigation into the smartphone surveillance company Outlogic (formerly X-Mode Social), which bills itself as the “second largest U.S. data company” and tracks people through more than 100 smartphone apps. Outlogic is now prohibited from selling or sharing any person’s private location data that could be used to track someone to a health care facility, domestic abuse shelter or place of worship.
The FTC accepted the consent agreement on a 3-0 vote. In a joint statement, FTC chair Lina Khan pointed at the U.S. Supreme Court ruling that constitutional protections against unchecked government surveillance extend to geolocation tracking “even when the data is originally collected by private companies.”
“The explosion of business models that monetize people’s personal information has resulted in routine trafficking and marketing of Americans’ location data. As the FTC has stated, openly selling a person’s location data to the highest bidder can expose people to harassment, stigma, discrimination or even physical violence,” Khan said Tuesday.
Under its former name as X-Mode, Outlogic is also the company that was exposed in a 2020 investigation by Motherboard’s Joseph Cox for selling users’ personal data to the U.S. military. Notably, the company deployed a precise location-tracking app that also functioned as a Muslim prayer app. It was installed 98 million times. X-Mode CEO Joshua Anton told CNN at the time that the company was using its 400 or so apps to track 25 million devices inside the U.S. every month, along with 40 million devices elsewhere.
Although Outlogic didn’t directly sell abortion-specific data, the FTC complaint specifically mentioned how easy it would be to hunt down an abortion seeker with the highly specific location data the company sells.
“The location data could be used to track consumers who have visited women’s reproductive health clinics and as a result, may have had or contemplated sensitive medical procedures such as an abortion or in vitro fertilization. Using the data X-Mode has made available, it is possible for third parties to target consumers visiting such healthcare facilities and trace that mobile device to a single-family residence,” the commission said in its filing.
Khan’s remarks are no exaggeration. One of X-Mode/Outlogic’s previous clients is a private intelligence firm called HYAS which has boasted about tracking people “down to their physical doorstep” using location data bought from X-Mode.
“X-Mode must also delete all the sensitive location data it unlawfully collected, as well as any model or algorithm derived from this unlawfully collected location data,” Khan said in a series of tweets, adding that the agency “will continue to use all our tools to safeguard Americans’ sensitive data from unchecked corporate surveillance.”
5. With this action, the Commission rejects the premise so widespread in the data broker industry that vaguely worded disclosures can give a company free license to use or sell people’s sensitive location data.
— Lina Khan (@linakhanFTC) January 9, 2024
As reported by Politico, an Outlogic spokesperson contended that the company had not misused user location data, saying it would comply with the FTC without making major changes.
“Adherence to the FTC’s newly introduced policy will be ensured by implementing additional technical processes and will not require any significant changes to businesses or products,” the company said.
The FTC order is also likely to have significant implications for advertising schemes on social media platforms, which often use users’ geolocation data to serve up strategically targeted ads. A pandemic-driven rise in virtual medical care, and the spread of unregulated video-conferencing and health-based apps — has also widened the doorway for patient privacy breaches.
Meanwhile, data brokers are buying and selling patient mental health data with nearly zero oversight, putting user privacy at greater risk as AI-enabled tools outpace federal regulation and drive new and disturbing forms of online harassment. In the vacuum of federal regulation, websites and data brokers — especially social media companies — now face an increasingly complex obstacle course of state data privacy laws. Establishing protections for minors has become a rare bipartisan theme in many legislative debates on tech, sparked in large part by the ongoing teen mental health epidemic.
Forty-one states are currently suing Facebook and Instagram parent company Meta, alleging the company lured teens with addictive and harmful content, and then profited off data it collected from them, using geolocation and other sensitive personal data to serve targeted ads. In November, the social media giant filed a lawsuit against the FTC in a bid to dodge the $5 billion fine it has owed the government since 2019.
Ahead of the FTC settlement on Tuesday morning, Meta debuted its latest effort to get ahead of regulation, rolling out some modest content restrictions for teens on its apps. Children’s advocacy group Fairplay called Meta’s last-minute move “desperate” and urged Congress to take action.
“Today’s announcement by Meta is yet another desperate attempt to avoid regulation and an incredible slap in the face to parents who have lost their kids to online harms on Instagram. If the company is capable of hiding pro-suicide and eating disorder content, why have they waited until 2024 to announce these changes?,” Fairplay executive director Josh Golin said in a statement.
“The FTC and state AGs are doing their part to hold Meta accountable for their abuses of young people,” he continued. “Now it’s Congress’s turn: toss Meta’s press release in the recycling bin and pass the Kids Online Safety Act and COPPA 2.0.”
Facebook and Instagram aren’t the only platforms catching heat for how they collect and use kids’ data, however. TikTok, used by up to two-thirds of American teenagers, also ran afoul of ethics standards last year when its algorithm was caught serving extremist and violent content to 13-year-olds.
The collection of kids’ geolocation data takes on even more alarming context in light of government contractors like Palantir — which helped Homeland Security and Customs and Border Protection agents track and surveil immigrant families using a combination of biometric and non-public databases.
The throughline connecting the FTC’s X-Mode settlement and the weaponization of social media surveillance wasn’t lost on Sen. Ron Wyden, D-Ore., who lauded the FTC and echoed Fairplay’s calls for legislative action.
“I commend the FTC for taking tough action to hold this shady location data broker responsible for its sale of Americans’ location data,” Wyden said in a statement.
“In 2020, I discovered that the company had sold Americans’ location data to U.S. military customers through defense contractors. While the FTC’s action is encouraging, the agency should not have to play data broker Whack-a-Mole. Congress needs to pass tough privacy legislation to protect Americans’ personal information and prevent government agencies from going around the courts by buying our data from data brokers.”
Truthout Is Preparing to Meet Trump’s Agenda With Resistance at Every Turn
Dear Truthout Community,
If you feel rage, despondency, confusion and deep fear today, you are not alone. We’re feeling it too. We are heartsick. Facing down Trump’s fascist agenda, we are desperately worried about the most vulnerable people among us, including our loved ones and everyone in the Truthout community, and our minds are racing a million miles a minute to try to map out all that needs to be done.
We must give ourselves space to grieve and feel our fear, feel our rage, and keep in the forefront of our mind the stark truth that millions of real human lives are on the line. And simultaneously, we’ve got to get to work, take stock of our resources, and prepare to throw ourselves full force into the movement.
Journalism is a linchpin of that movement. Even as we are reeling, we’re summoning up all the energy we can to face down what’s coming, because we know that one of the sharpest weapons against fascism is publishing the truth.
There are many terrifying planks to the Trump agenda, and we plan to devote ourselves to reporting thoroughly on each one and, crucially, covering the movements resisting them. We also recognize that Trump is a dire threat to journalism itself, and that we must take this seriously from the outset.
After the election, the four of us sat down to have some hard but necessary conversations about Truthout under a Trump presidency. How would we defend our publication from an avalanche of far right lawsuits that seek to bankrupt us? How would we keep our reporters safe if they need to cover outbreaks of political violence, or if they are targeted by authorities? How will we urgently produce the practical analysis, tools and movement coverage that you need right now — breaking through our normal routines to meet a terrifying moment in ways that best serve you?
It will be a tough, scary four years to produce social justice-driven journalism. We need to deliver news, strategy, liberatory ideas, tools and movement-sparking solutions with a force that we never have had to before. And at the same time, we desperately need to protect our ability to do so.
We know this is such a painful moment and donations may understandably be the last thing on your mind. But we must ask for your support, which is needed in a new and urgent way.
We promise we will kick into an even higher gear to give you truthful news that cuts against the disinformation and vitriol and hate and violence. We promise to publish analyses that will serve the needs of the movements we all rely on to survive the next four years, and even build for the future. We promise to be responsive, to recognize you as members of our community with a vital stake and voice in this work.
Please dig deep if you can, but a donation of any amount will be a truly meaningful and tangible action in this cataclysmic historical moment.
We’re with you. Let’s do all we can to move forward together.
With love, rage, and solidarity,
Maya, Negin, Saima, and Ziggy