Privacy GuideJune 3, 20269 min read

How to Protect Your Privacy From Geofence Warrants

SC

By Sarah Chen

Head of Privacy Research

How to Protect Your Privacy From Geofence Warrants

Imagine being investigated for a crime simply because your phone placed you in the wrong neighborhood at the wrong time. That is the reality of geofence warrants — a controversial law enforcement technique that turns the location data of millions of innocent people into a searchable surveillance tool. With the U.S. Supreme Court now weighing in on the constitutionality of these warrants, here is what you need to know and how to protect yourself.

What Are Geofence Warrants?

A geofence warrant, also called a reverse location warrant, is a court order that allows law enforcement to draw a virtual boundary around a geographic area and a time window where a crime occurred, then demand that a technology company — most commonly Google — hand over data identifying every user whose device was within that boundary during that period.

Unlike traditional warrants that target a specific suspect, geofence warrants work backward: police start with a location and time, then search for people, turning potentially thousands of innocent bystanders into suspects. In 2020 alone, law enforcement served approximately 11,500 geofence warrants on Google.

How the Process Works

The typical geofence warrant follows a three-step process:

  1. Step 1: Police define a geographic area (the "geofence") and time window around a crime scene and obtain a warrant requiring Google to search its Sensorvault database
  2. Step 2: Google returns anonymized location data for every device detected within the geofence during the specified period
  3. Step 3: Police review the anonymized data, narrow the list based on movement patterns, and then request Google to de-anonymize specific accounts they consider relevant

The problem is that Step 2 exposes the location data of everyone in the area — not just potential suspects. A person jogging through a park, commuting to work, or sitting in a nearby coffee shop could all be swept up in the search.

Innocent People Have Been Targeted

Geofence warrants have turned innocent people into criminal suspects. In documented cases, a man tracking his bike rides was flagged as a burglary suspect because his route passed near a targeted home. Others have been wrongly arrested based on the mere proximity of their phone to a crime scene.

Google's Sensorvault and Recent Changes

The vast majority of geofence warrants have targeted Google because of Sensorvault, a proprietary database that aggregated detailed chronological location records from hundreds of millions of devices worldwide. At its peak, Sensorvault contained location data for an estimated 592 million users who had opted into Google's Location History feature, with data points recorded approximately every two minutes using GPS, Wi-Fi, cellular towers, and Bluetooth beacons.

In December 2023, Google announced a major privacy change: Location History data would be moved from the cloud to on-device storage. This transition rolled out through 2024, and by mid-2025, Google could no longer perform the centralized database searches that geofence warrants relied upon. Key changes included:

  • On-device storage: Location History data is now stored directly on your phone rather than in Google's cloud servers
  • Shorter retention: The default auto-delete period was reduced from 18 months to 3 months
  • No web access: Timeline data can no longer be viewed on the web, since it comes directly from the device
  • Reduced law enforcement access: Without a centralized database, Google can no longer comply with broad geofence searches in the same way

While this is a significant improvement, it does not eliminate the risk entirely. Other companies still collect and store location data, and law enforcement is already exploring alternative sources.

The Legal Battle: Where Things Stand in 2026

The constitutionality of geofence warrants is actively being decided at the highest levels of the U.S. legal system.

The Fifth Circuit Ruling (2024)

In August 2024, the Fifth Circuit Court of Appeals ruled in United States v. Smith that geofence warrants are categorically unconstitutional under the Fourth Amendment, calling them "modern-day general warrants" — the very type of broad, suspicionless searches that the Fourth Amendment was written to prohibit. The court noted that searching a database covering 592 million people to find a handful of suspects was inherently unreasonable.

The Supreme Court Case: Chatrie v. United States (2026)

In January 2026, the Supreme Court agreed to hear Chatrie v. United States, a case involving a geofence warrant served on Google during the investigation of a 2019 bank robbery in suburban Richmond, Virginia. The case has produced a circuit split — the Fourth Circuit previously upheld geofence warrants, while the Fifth Circuit ruled them unconstitutional.

During oral arguments in April 2026, the justices appeared divided. The government argued that users who voluntarily opted into Google's Location History had waived their reasonable expectation of privacy. However, Justice Neil Gorsuch pushed back, questioning whether that logic would also expose all cloud-stored data — including emails — to warrantless government searches. A ruling is expected by the end of the Court's current term.

Why This Case Matters Beyond Geofencing

The Supreme Court's decision in Chatrie could set a sweeping precedent for digital privacy. If the Court rules that opting into a commercial service waives your Fourth Amendment protections, it could open the door to warrantless searches of email, cloud storage, and any data you voluntarily share with a technology company.

How to Protect Your Privacy From Geofence Warrants

While the legal landscape evolves, there are practical steps you can take right now to minimize your exposure to geofence surveillance.

1. Manage Your Location History Settings

The single most effective step is to disable or limit location tracking on your devices:

  • Google (Android): Go to Settings > Location > Location Services > Google Location History and turn it off. Also review and delete existing Timeline data
  • Apple (iOS): Go to Settings > Privacy & Security > Location Services. Set individual apps to "While Using" or "Never" instead of "Always." Disable Significant Locations under System Services
  • Audit app permissions: Review which apps have location access and revoke it for any app that does not genuinely need it — social media, weather, and shopping apps rarely need constant location access

2. Limit Always-On Location Sharing

Many apps request "always on" location access but function perfectly fine with "while using" or no location access at all. Reducing the number of apps that track your location in the background directly reduces the amount of data that could be swept up in a geofence warrant.

3. Use a VPN

A VPN encrypts your internet traffic and masks your IP address, which can be used as a rough location indicator. While a VPN does not prevent GPS-based location tracking, it adds a layer of protection against IP-based geolocation used by websites and online services.

4. Consider a Privacy-Focused Phone

For maximum protection, consider using a phone with a privacy-focused operating system like GrapheneOS, which gives you granular control over location permissions and eliminates many of the background location collection mechanisms built into standard Android and iOS.

5. Be Aware of Other Location Sources

Even with phone settings locked down, other devices and services can reveal your location:

  • Connected cars: Modern vehicles collect and transmit location data continuously
  • Wearables: Fitness trackers and smartwatches often log GPS data
  • Wi-Fi connections: Connecting to public Wi-Fi can establish your presence at a specific location
  • Payment methods: Credit and debit card transactions create a location trail — cash does not
  • Social media check-ins and photo metadata: Location data embedded in photos and posts

6. Remove Your Personal Data From Broker Sites

Geofence warrants become far more dangerous when the location data can be easily linked to your real identity. Data broker and people-search sites make this connection trivial by publicly listing your name, address, phone number, email, and relatives. Removing your data from these sites makes it harder for anyone — including law enforcement acting on a geofence warrant — to connect a device identifier to your personal identity.

The Bigger Picture: Location Privacy in 2026

Geofence warrants are one piece of a larger location surveillance ecosystem that includes license plate readers, facial recognition, cell-site simulators (Stingrays), and commercial data brokers that buy and sell location data from apps. Protecting your privacy requires a comprehensive approach that addresses all of these vectors.

PrivacyOn helps by removing your personal information from 100+ data broker sites — the databases that link device identifiers and location data to your real identity. With dark web monitoring to alert you when your data appears in criminal marketplaces, 24/7 continuous scanning, and family plans covering up to 5 people starting at $8.33/month, PrivacyOn reduces the personal data footprint that makes surveillance tools like geofence warrants so effective.

Take control of your digital footprint. Start protecting your privacy with PrivacyOn today.

SC
Sarah Chen

Head of Privacy Research

CIPP/US CertifiedIAPP MemberB.S. Computer Science

CIPP/US-certified privacy researcher with over a decade of experience helping consumers remove their personal information from data brokers.

Ready to Protect Your Privacy?

Let PrivacyOn automatically remove your personal information from data broker sites and keep it removed.