Pentagon Kills Trackers on Troop Phones

The Pentagon shut off ad IDs on military devices after reports that commercial location data helped target U.S. troops.

Story Snapshot

Branches disabled advertising identifiers on government phones and computers.
Officials warned commercial data can reveal troop routines and positions.
Lawmakers say the fix helps but does not close bigger ad-tech risks.
Past probes showed massive troves of phone pings mapping bases and units.

What changed on military devices and why it matters

U.S. military leaders told Senator Ron Wyden they disabled advertising identifiers across several device types, including Air Force phones and computers, U.S. Special Operations Command Windows systems, and Army mobile devices. These identifiers act like nametags for apps and ads. They let data brokers stitch together a person’s movements and habits. Killing that tag on official devices cuts a rich stream of signals. That lowers the chance that open-market data can reveal unit patterns or base routines where troops live and work.

U.S. Central Command has warned that commercial location data can show where troops gather and how they move. Officials said adversaries can use this to guide drones, missiles, roadside bombs, and spy efforts. That warning tracks with common sense and a long record of reporting. Phones are radios that talk all day. Every ping to an ad exchange can become a dot on a map. Enough dots show a pattern. A pattern can become a target.

The bigger ad-tech problem the shutdown cannot fully solve

Disabling advertising identifiers blocks one powerful tracker, but it does not stop all data flows. Many apps collect location and other device signals even without the ad ID. Data brokers can also link other clues, like Wi-Fi networks or app behavior, to build profiles. That means the risk shifts rather than vanishes. Lawmakers have pushed the Pentagon to go further on policy, app vetting, and safe-phone rules in the field, arguing these steps must back the technical changes already made.

Stronger controls on personal phones near missions may be next. Guidance exists, but reports note that turning off location services does not always work as expected on every device and app build. A stricter mix seems likely: fewer apps, tighter permissions, and clearer rules on when a personal phone must stay off or outside a perimeter. That approach fits a simple rule: if a signal can leave a phone, a skilled buyer can likely find it on the open market.

Evidence that commercial data can expose troops

Investigations have shown that data sold for advertising can paint vivid maps of sensitive places. One study found 3.6 billion location points tied to up to 11 million mobile ad identifiers in just one month in Germany, a dataset that exposed movements tied to military and intelligence sites. This scale proves why a single setting on a phone is not enough. The system runs on scale. The system also sells at scale. Anyone with money can buy pieces of the puzzle and assemble a picture.

Reuters reported earlier that officials received multiple threat reports about adversaries exploiting commercial location data to track or target U.S. personnel. That is a clear statement of risk from inside the chain of command. When uniformed leaders flag that kind of threat, it deserves a fast, real fix. Cutting off ad IDs on official devices is a direct fix to a known leak. It also signals to partners and vendors that the Defense Department expects clean builds and fewer beacons.

What a common-sense path forward looks like

Defense leaders should harden the full stack: devices, apps, networks, and contracts. Device builds should strip trackers, kill unneeded radios by default, and block high-risk apps. App stores for official devices should be short and strict. Networks on and near bases should filter ad-tech calls. Contracts with vendors should ban the sale or sharing of any device telemetry. These steps match conservative values: reduce attack surface, enforce discipline, and hold suppliers to firm terms.

Congress can back this with a simple standard: if you collect data from service members or on base networks, you cannot sell it. The Department of Justice (DOJ) and the Federal Trade Commission (FTC) can enforce that line. Clear law plus real audits beats trust. Adversaries buy where the rules are weak. America should not let a discount data bundle endanger those who stand watch. Killing ad IDs is step one. Locking the market door is step two.