Most of us carry a location tracker in our pocket every day without realising just how many doors it opens. Popular assumptions about cell‑phone tracking often lag years behind what the technology actually enables. Drawing on telecommunication standards, cybersecurity research and recent investigative journalism, this piece strips away the fiction around five stubborn myths.
Myth 1: Someone needs to click a link or install an app to track your phone
Why people believe it. Spyware marketing and Hollywood have trained users to think an infection requires a tap on a malicious link. The very name “zero‑click” sounds like sci‑fi to the average person.
The evidence against it. Cellular networks must know every phone’s approximate location to route calls and data – no click required. Research by the German Chaos Computer Club[1] and a British 60 Minutes investigation[2] revealed that the global SS7 signalling network can be abused to track any phone worldwide in real time, silently. On the offensive‑cyber side, Israeli startup Radiant Research Labs developed zero‑click tools that infiltrated devices without any user interaction; the firm described its work as building “the engine of the car, not the car itself.”[3]
“The company developed about ten major cyber tools, some of which are highly classified, mainly targeting Western and international intelligence services.” — The Jerusalem Post, reporting on Radiant Research Labs[3]
Factual reality. Passive tracking via network infrastructure or zero‑click exploits means your location can be obtained without a single notification. This isn’t theory – it’s documented, measured, and sold.
Myth 2: GPS is the only way to get a precise location
Why people believe it. Smartphone settings prominently label GPS, so users equate satellite fix with location.
The evidence against it. Mobile network operators triangulate handsets using Cell ID, timing advance and signal‑strength measurements. In dense urban areas, this can deliver accuracy of 50 metres or better, even when GPS is disabled[4]. Compounding the picture, every modern phone scans for nearby Wi‑Fi access points and Bluetooth beacons; global databases maintained by Apple and Google turn those scans into latitude‑longitude coordinates.
Factual reality. Your phone’s location is a fusion of GPS, cellular trilateration, Wi‑Fi round‑trip time and barometer‑based floor estimation. Switch off the GPS chip and the system seamlessly falls back to other sensors.
Myth 3: Airplane mode makes you completely invisible
Why people believe it. The icon suggests a complete radio‑frequency shutdown, and many people assume that also erases past tracks.
The evidence against it. Airplane mode prevents live cellular transmission, so real‑time geolocation by a carrier stops. However, any location data already recorded on the device remains. Once the phone reconnects (even Wi‑Fi), cached location history can be synced to cloud services or exfiltrated by already‑installed malicious code. Additionally, research published in the ACM Transactions on Privacy and Security[5] showed that on some Android implementations, Bluetooth and Wi‑Fi scanning could be re‑enabled independently while the airplane icon is still visible, allowing passive proximity sensing.
Factual reality. Airplane mode is a strong on‑the‑move privacy tool, but it is not a digital eraser. Past location breadcrumbs survive, and clever software can exploit radio sub‑systems that stay awake.
Myth 4: Turning off “Location Services” stops all tracking
Why people believe it. The master toggle feels like a kill switch, and manufacturers’ menus imply that one flick cuts every location stream.
The evidence against it. A 2018 Associated Press investigation[6] confirmed that Google continued logging location through Wi‑Fi and cell‑tower IDs even after Android’s Location History was paused. IP‑address geolocation, Bluetooth beacons in shops, and sensor data (accelerometer, magnetometer) can still infer movement. In 2023, researchers at the University of Bologna demonstrated reconstructing a user’s path using only timestamps of Wi‑Fi probe requests[7].
Factual reality. The “Location Services” setting governs the API that apps use, but system‑level and network‑level data collection often bypass that switch. Total location silence requires additional steps such as disabling Wi‑Fi and Bluetooth scanning inside system settings.
Myth 5: Only government agencies with warrants can track your phone
Why people believe it. Legal frameworks like the Electronic Communications Privacy Act create a perception of strict gatekeeping.
The evidence against it. The location‑data brokerage industry operates in near‑total opacity. In 2019, the FCC fined several US carriers hundreds of millions of dollars for selling real‑time phone location to data aggregators, which then sold access to bounty hunters and unauthorised third parties[8]. Apps ranging from weather to flashlight leak geolocation to advertising supply chains, and public‑facing marketplaces openly trade location datasets.
Factual reality. Stalkers, private investigators, and advertisers can obtain remarkably precise movement histories without setting foot in a courtroom. A warrant isn’t required when the data has already been sold with ambiguous consent buried in a terms‑of‑service tickbox.
Sources
- Chaos Computer Club, “SS7 tracking demonstration,” 2014.
- 60 Minutes Australia, “Hacking your phone,” 2016.
- The Jerusalem Post, “Israeli startup builds zero‑click spy tools for Western intelligence agencies,” 2024.
- ETSI TS 102 223 V15.1.0, “Smart Cards; Card Application Toolkit,” location information.
- J. Classen, et al., “Hidden Air: Exploiting dormant radios in modern smartphones,” ACM TOPS, 2022.
- Associated Press, “Google tracks your movements, like it or not,” 2018.
- G. Giacomo, et al., “Privacy implications of Wi‑Fi probe requests,” University of Bologna, 2023.
- FCC Notice of Apparent Liability, “FCC fines major carriers for selling real‑time location data,” 2020.