Dangerous apps - In the web of data brokers | DW Documentary

Summary of the DW Documentary on “Dangerous apps — In the web of data brokers”

The documentary investigates how smartphones—via popular apps—silently generate extremely precise location “movement profiles” that are then traded by data brokers, enabling surveillance by governments, harassment of dissidents, and potentially lethal targeting in conflict zones.

1) Smartphones as de facto tracking devices

• The film opens with the core idea: phones act like “spy agency” trackers because their location data can be harvested and used to reconstruct millions of people’s movements.
• It argues that location data can be used not only for privacy-invasive profiling, but also as an intelligence tool in high-stakes environments—such as war and political persecution.

2) Proof of scale: billion-point datasets

• In late 2023, journalists Ingo Dachwitz and Sebastian Meineck obtained massive location datasets from brokers (including one described as a Florida broker), containing billions of GPS points.
• The data is presented as “anonymous” (ID-based), but investigators show it is often re-identifiable using patterns such as “home” and “workplace,” plus routines.
• They demonstrate this with an 18-year-old (under an alias), whose route, shopping trips, and social meetups can be traced in detail.

3) Personal safety and political repression risks

• The documentary profiles Basma Mostafa, an Egyptian journalist in exile in Berlin who says she is harassed and threatened by Egyptian agents.
• By matching location patterns from a broker’s dataset to her life in Berlin, the film suggests her phone-based location trails may enable surveillance and intimidation.
• Experts describe it as plausible that intelligence services—even “second-tier” ones—can buy such data.

4) How location data gets used commercially (and why misuse is foreseeable)

The documentary links the supply chain to advertising:

• Location data improves targeted marketing (e.g., identifying which stores people visited after seeing ads).
• Data is traded online and can be accessed through platforms such as data marketplaces.

It also highlights a regulatory loophole in Germany:

• Trading without user consent is forbidden, but acting as an agent for foreign data brokers may be permitted—allowing brokers/marketplaces to operate.

5) Misuse consequences: stigma, crime, and potential targeted violence

The film cites cases where location data exposure had grave outcomes:

• U.S. Catholic priest: Outed after location data (including dating-app location signals) was used to identify his private life, forcing him to resign.
• Sinaloa Cartel (allegation): Used location data of an FBI agent to identify contacts and intimidate/kill individuals.
• National security concern (citing reporting by Netzpolitik/Bayerischer Rundfunk): Suggests location data may have been used to track a person associated with German/US intelligence activity near “The Tin Can” (NSA/BND collaboration site), raising national security concerns.

6) App-specific findings: WetterOnline and pipelines to major tech

• In Germany, investigators found that WetterOnline (a weather app) shares location-related data with hundreds of companies.
• In spring 2025, authorities reportedly raided WetterOnline and discovered data “pipelines” exchanging location data with Amazon, and possibly Google (Google did not respond; Amazon denied the sharing as claimed).
• The film emphasizes that even if data is allegedly collected for “service delivery,” it can still enter ad-tech/data broker ecosystems.

7) Investigation across Europe and the “impossible to decode” ad ecosystem

• Le Monde journalist Martin Untersinger and collaborators analyzed location-linked advertising IDs and found that many apps (including large French platforms and gaming/other apps) contribute to mass collection.
• They also found Le Monde’s own app/app-specific advertising identifiers appearing in the broker dataset without the teams understanding how it got there—used as evidence that the ecosystem is fragmented, opaque, and difficult to trace or regulate.

8) U.S. reproductive rights example: tracking abortion clinic visits

• U.S. journalist Byron Tau describes LocateX software (Babel Street) using purchased location data to track visits to abortion clinics.
• The documentary ties this to the post-Roe v. Wade landscape, warning about risks to people traveling for care and the likelihood that phone location can be used for monitoring or persecution.
• It includes the story of Lauren Miller in Texas, who had to travel to Colorado for a necessary medical procedure after abortion access became restricted.

9) Surveillance of EU institutions and concerns about institutional compliance

• The film claims the EU data trade may also expose European Commission staff, potentially revealing identifiable routes to sensitive meetings.
• The European Commission acknowledges concern about the trade in location data but argues that EU law (GDPR) prohibits collecting/processing precise location data without a specific lawful purpose.
• Industry insiders (including Arielle Garcia, featured as an expert/activist) argue the sector uses “privacy compliant” language and compliance-labeling to continue practices.

10) Ukraine war risk: location data as battlefield intelligence

• The documentary connects location trading to combat risk by showing how broker datasets appear to include locations near the front in Ukraine.
• It includes soldier testimonies (Dmytro and Svyat) describing smartphones as essential communication links—while raising whether the same tracking helps adversaries.
• The film argues such data could reveal evacuation points, command locations, transport routes, and timing for troop rotations—helping attackers plan strikes.

11) Who profits and where brokers operate

• Reporters trace the data broker supplying the investigation to a man living in Florida.
• The broker and data marketplace (Datarade, a Berlin-based intermediary) deny wrongdoing, claiming data anonymity/consent and denying direct sale to intelligence services.
• The documentary portrays the market as highly lucrative and difficult to regulate globally, with many marketplaces operating worldwide.

12) Closing thesis: lack of control makes it a societal and democratic threat

• The documentary concludes that users effectively cannot meaningfully opt out because many apps require location-sharing to function properly.
• It frames the end result as anyone being potentially spy-able—by governments, criminals, or political actors—with particularly severe harm in repression and war contexts.
• Overall verdict presented: the cost to privacy, security, and democracy is not acceptable.

Presenters / contributors

• Ingo Dachwitz (journalist)
• Sebastian Meineck (journalist)
• Basma Mostafa (journalist; interview subject)
• Dmytro (soldier; interview subject)
• Svyat (soldier; interview subject)
• Arielle Garcia (activist; former industry participant)
• Martin Untersinger (journalist, Le Monde; investigator)
• Byron Tau (U.S. journalist; author/researcher)
• John Bolton (referenced via testimony/interview footage)
• Donald J. Trump (referenced via footage/news context)
• Bettina Gayk (North Rhine-Westphalia State Commissioner for Data Protection and Freedom of Information; mentioned)
• “Bayerischer Rundfunk” (Bavarian public broadcaster) reporting team (mentioned)
• “Netzpolitik” (digital rights blog) (mentioned)
• EU Commission (institution; statement referenced)
• Datarade (data marketplace; statement referenced)
• WetterOnline (weather app; authorities/incident referenced)
• “Atlas Privacy” / “Babel Street” (referenced in LocateX demo/usage context)