Your phone can be tracked by a hidden ID even with location services switched off

Switching off a phone’s location services feels like a decisive privacy move, but it closes only one of several doors. Phones carry a persistent advertising identifier that apps and ad networks use to recognize the same device over time, and that ID keeps working whether or not location tracking is turned on, quietly stitching together a profile of what a person does across the apps they use.

The distinction matters because most people assume the location toggle is the master switch for being tracked. In practice, location data is just one signal among many. A device can be followed, profiled, and served targeted ads based on an identifier that has nothing to do with GPS, which is why turning off location alone leaves a meaningful trail intact.

How the advertising ID follows a device

Both major mobile platforms assign each phone a resettable advertising identifier, a string of characters meant to let advertisers measure and target without using a name. Apps can read this ID and report it back to advertising and analytics companies, which use it to link a user’s activity across different apps into a single behavioral profile. Because the same identifier appears everywhere, it functions like a shared key that ties otherwise separate pieces of activity to one device.

None of this requires knowing where the phone physically is. The advertising ID tracks behavior, which apps are opened, what is viewed, what is purchased, rather than geographic position, so disabling location services does nothing to stop it. That is the core of why the headline claim holds: the identifier is a separate mechanism, running in parallel with, not dependent on, location tracking.

Fingerprinting when identifiers run out

Even where advertising IDs are limited, devices can be recognized through a technique called fingerprinting. It combines many small, individually unremarkable details about a device, such as its model, operating-system version, language and time-zone settings, and screen characteristics, into a signature distinctive enough to single out one phone among millions. Because these traits are exposed in the normal course of using apps and the web, fingerprinting can persist even when a user resets or restricts the advertising ID.

Fingerprinting is harder for individuals to see and to block precisely because it does not rely on a single, resettable value. It reconstructs identity from the ambient technical details a device gives off, which is why privacy protections have increasingly focused on limiting what information apps and sites can collect in the first place, rather than assuming users can simply switch tracking off.

What turning off location actually does

Disabling location services is still worthwhile, but it is important to understand its scope. It restricts apps from reading precise GPS position, which is the most sensitive category of data, and it prevents the kind of movement mapping that reveals a home, a workplace, or a daily routine. That is a genuine privacy gain and a reasonable default for apps that have no need for location.

What it does not do is make a phone anonymous. Behavioral tracking through the advertising ID, and identification through fingerprinting, continue regardless. Treating the location toggle as complete protection creates a false sense of security, when in reality it addresses only one dimension of how modern phones are tracked.

Steps that limit tracking more broadly

Reducing the fuller scope of tracking takes a few additional actions, and consumer regulators publish practical guidance on them. The Federal Trade Commission’s advice on protecting privacy on apps points users toward reviewing and tightening the permissions each app is granted, since an app that cannot access data cannot share it. Both mobile platforms also allow users to reset the advertising identifier, which breaks the continuity of a profile, and to limit or opt out of ad tracking, which restricts how apps can use the ID.

Beyond those settings, deleting apps that are not needed removes potential collectors of data, and being selective about granting permissions during installation keeps the flow of information narrow from the start. These measures do not make a phone invisible, but together they shrink the amount of data available to build a profile, which is a more realistic goal than eliminating tracking entirely.

A more complete picture of phone privacy

The takeaway is that phone tracking is layered, and no single switch turns it all off. Location services govern one important layer, but the advertising ID and fingerprinting operate on others, and they keep functioning after the location toggle is flipped. Understanding that structure is what allows a person to make informed choices, resetting identifiers, limiting permissions, and opting out where possible, rather than relying on one setting to do a job it was never designed to do. Privacy on a modern phone is managed in pieces, not with a master switch.

This article was researched and written with the assistance of AI and reviewed by an editor prior to publication.

More from Morning Overview