Why location data is collected and how Australians can opt out
Your phone can reveal where you spend Monday mornings, which supermarket you visit, how often you travel to the CBD and whether you regularly attend a medical clinic. That information may be gathered even when you are not actively using a map. Apps, advertising software and mobile networks can turn location signals into a detailed behavioural profile.
Data brokers collect, combine and licence these details because location is commercially useful. It can help advertisers estimate interests, measure visits to shops or venues, detect likely home and work areas, and target people near a particular place. A single location point may seem harmless; months of movement can be highly revealing.
Australians have practical ways to reduce this tracking. The process involves checking app permissions, limiting advertising identifiers, reviewing account settings and contacting companies that hold personal information. It also helps to understand which protections apply under Australian privacy law and where those protections may have limits.
Why location data has commercial value
Location information provides context that ordinary demographic data cannot. A person’s approximate age or postcode says little about what they are doing today, while a regular presence at a gym, university, airport or shopping centre may suggest interests, habits or purchasing power.
Advertisers can use geofencing to deliver campaigns to devices inside a defined area. Retailers may compare foot traffic with advertising exposure, while property, transport and market research businesses can analyse broader movement patterns. Brokers may sell raw coordinates, audience segments or insights derived from many devices.
The data is often described as anonymous or aggregated. That reduces some risks, but repeated visits to a home, workplace or distinctive rural property can make a device easier to associate with a real person. Location history can also expose sensitive activities without recording the exact purpose of a visit.
Where the signals come from
Smartphones can estimate location through GPS, nearby Wi-Fi networks, Bluetooth beacons, mobile towers and IP addresses. An app does not always need continuous GPS access to make useful inferences. Occasional location checks, device identifiers and timestamps may be enough to establish patterns.
Weather, navigation, dating, fitness, shopping and social apps can share data through embedded software development kits. Free apps may rely heavily on advertising revenue, and their privacy settings can be scattered across the app, the operating system and an account dashboard.
Your browsing activity can add further clues. An IP address may indicate a suburb or city, while searches and online purchases help connect a general location to likely interests. Using public Wi-Fi at a Melbourne café or joining a loyalty programme at a Brisbane retailer can create additional records that are not held by the same company.
What brokers do with the information
A broker may combine location signals with property records, loyalty data, browsing events, age ranges or household information. The result can be a marketing segment such as “frequent inner-city commuters” or “recent visitors to automotive retailers”. Businesses generally buy access to a category or audience rather than receiving a complete dossier on every individual.
Location intelligence can also support analytics, fraud detection and store planning. Those uses are not automatically improper, yet consumers may have little visibility into the chain of suppliers involved. An app’s privacy notice may name advertising or analytics partners without clearly explaining every downstream recipient.
Security matters throughout that chain. Weak account protection can expose data before a broker uses it, so website operators and small businesses should use encrypted connections and sound access controls; guidance on free SSL benefits is relevant for anyone running a personal site or online service.
What Australian privacy rules cover
Australia’s Privacy Act and Australian Privacy Principles apply to many organisations, especially those meeting the annual turnover threshold or operating in specified sectors. They require covered entities to handle personal information transparently, protect it and provide access or correction pathways. Location data can be personal information when it identifies, or could reasonably identify, an individual.
The rules do not create a universal “do not sell my location” switch. Some businesses may rely on consent, legitimate business practices or de-identified datasets, while overseas advertising partners may operate under different rules. The privacy policy should explain collection and disclosure, but technical language can make the real impact difficult to assess.
Start with the company that collected the information. Ask what location data it holds, why it is used, which third parties receive it and how it can be deleted or de-linked. If the response is inadequate, the Office of the Australian Information Commissioner may be relevant, although it generally expects people to contact the organisation first.
How to reduce collection on your devices
On an iPhone, review Location Services and set most apps to “Never” or “While Using”, then consider disabling Precise Location where an approximate suburb is enough. On Android, use the permission manager, check background access and reset or delete the advertising ID where available. Menu names vary by device version, so revisit them after major system updates.
Remove apps you no longer use and avoid granting location access to an app that has no clear need for it. A weather app may need a location while open, while a simple torch or calculator usually does not. Turning off Bluetooth and Wi-Fi scanning when practical can reduce passive signals, though these settings may affect convenience and device-finding features.
Privacy changes work better when they are repeated. A digital detox routine can include a monthly permission review, an audit of unused accounts and a short check of advertising preferences. It should complement, rather than replace, careful app choices.
| Method | What it limits | Main trade-off |
|---|---|---|
| Deny background location | Continuous app access | Some alerts and automation may be less useful |
| Disable precise location | Exact coordinates | Nearby services may become less accurate |
| Reset advertising ID | Long-term ad profiling tied to one identifier | Personalised advertising may still continue through other signals |
| Delete unused apps and accounts | Future collection and account linkage | Saved settings or history may disappear |
| Contact the organisation or broker | Known records and marketing use | Opt-out portals can be time-consuming and incomplete |
A manageable privacy routine
A sensible approach is selective rather than extreme. Keep location enabled for navigation when needed, restrict it for apps that do not require it and make a habit of checking privacy dashboards. Australian households often share devices, use supermarket loyalty apps and connect through home broadband, so review family accounts and shared tablets as well.
Useful actions include:
- Check location permissions and background access once a month.
- Turn off precise location for apps that only need a broad area.
- Reset advertising identifiers and review Google or Apple ad settings.
- Unsubscribe from unnecessary loyalty, retail and marketing programmes.
- Request access or deletion from organisations that retain identifiable location data.
No single setting removes every location signal. The practical takeaway is to reduce unnecessary permissions first, then review advertising IDs, account data and broker opt-outs on a regular schedule.