Caught on camera? The hidden risks of geolocation data for at-risk users

With the rise of smart environments, geolocation data is no longer confined to personal devices; it is embedded in ubiquitous computing infrastructures, from smart cities to wearable technology. Activists interviewed in the study express concerns that continuous data collection increases their vulnerability, making it harder to control their digital exposure.

In an era of increasing digital surveillance and datafication, the security and privacy concerns of at-risk users, such as activists, have become more pronounced than ever. Digital footprints, particularly location data, pose unique threats to those engaged in political activism, journalism, and advocacy.

A recent study titled "My Whereabouts, My Location, it's Directly Linked to my Physical Security: An Exploratory Qualitative Study of Location-Dependent Security and Privacy Perceptions among Activist Tech Users" by Christian Eichenmüller, Lisa Kuhn, and Zinaida Benenson, submitted in arXiv (2025), delves into the perceptions, practices, and digital safety strategies of activists navigating the risks associated with their location data. Drawing from qualitative interviews, the study reveals how activists view their digital footprints and implement strategies to mitigate surveillance threats.

Digital security challenges for at-risk users

The study highlights the urgent need to reconsider digital safety beyond the conventional "average user" perspective. At-risk users - activists, journalists, and politically engaged individuals - face heightened threats from adversaries ranging from government surveillance to targeted cyberattacks. Unlike everyday digital users, activists must navigate a landscape where location tracking can be weaponized against them.

With the rise of smart environments, geolocation data is no longer confined to personal devices; it is embedded in ubiquitous computing infrastructures, from smart cities to wearable technology. Activists interviewed in the study express concerns that continuous data collection increases their vulnerability, making it harder to control their digital exposure. The research underscores how digital safety concerns are shaped by broader socio-political contexts, where data-driven surveillance is a tool of oppression in many parts of the world.

How activists perceive and manage location privacy risks

A key insight from the study is that activists adopt proactive measures to manage their location privacy. Many participants deliberately minimize their digital footprint by avoiding smart devices that continuously transmit location data. Some opt for burner phones or regularly switch SIM cards, while others refrain from carrying their mobile devices during high-risk activities such as protests or investigative meetings.

Interviewees also discuss their strategies for obfuscating location patterns, such as taking alternate routes, avoiding predictable travel routines, or selectively disabling GPS services. Despite these precautions, activists often experience an ongoing sense of insecurity, recognizing that perfect anonymity is difficult to achieve in an era of data permanence and pervasive surveillance. Many describe their digital security approach as an ongoing trade-off between operational effectiveness and risk mitigation.

The role of geopolitics in digital security decisions

One of the study's most striking findings is how geopolitical considerations influence activists' technology choices. Participants from authoritarian regimes highlight the risks associated with certain tech providers, making deliberate choices about which platforms and services to use. For example, some activists opt for US-based tech providers over companies from countries with authoritarian leanings, believing that they face fewer risks of government-mandated data handovers. Others employ decentralized and open-source tools to minimize dependency on corporate-controlled ecosystems.

The study also reveals that some activists self-censor their online activities based on geopolitical risk assessments. Before traveling to high-risk regions, participants described deleting past social media posts or avoiding digital interactions that might link them to politically sensitive activities. These anticipatory data practices demonstrate how digital security is not just a technical challenge but a deeply contextual and strategic process.

Implications for policy and future research

The research calls for a shift in digital security frameworks to better accommodate the needs of at-risk users. Standard cybersecurity measures often fail to address the real-world risks that activists face, necessitating more nuanced and adaptive safety strategies. The authors advocate for more interdisciplinary approaches to digital security, bringing together technology researchers, policymakers, and human rights organizations to develop better protections for vulnerable users.

Additionally, the study underscores the need for further research into location privacy, particularly as data collection technologies become more sophisticated. Future work should explore how activists can leverage emerging privacy-enhancing technologies, such as decentralized identity management and AI-driven anomaly detection, to strengthen their security postures. Ultimately, ensuring the digital safety of activists is not just a technical issue but a broader human rights concern that requires ongoing attention and innovation.