Your iPhone Secretly Records Your Location

We are know that iPhone can track user location. But, how many of knew that the iPhone constantly tracks your location and records your coordinates alongside a time stamp to a secret file?

This secret file is also copied to owner’s computer when the two are synchronised.

 

image

 

The Guardian reports that scientists have discovered a disturbing file within iDevices using iOS 4.0 and up. The file contains the latitude and longitude of the phone’s recorded coordinates along with a timestamp, meaning that anyone who stole the phone or the computer could discover details about the owner’s movements using a simple program.

 

Why is Apple collecting this information? It’s unclear. One guess might be that they have new features in mind that require a history of your location, but that’s pure speculation. The fact that it’s transferred across devices when you restore or migrate is evidence the data-gathering isn’t accidental.

Is Apple storing this information elsewhere? There’s no evidence that it’s being transmitted beyond your device and any machines you sync it with.

 

image

 

What’s so bad about this?

The most immediate problem is that this data is stored in an easily-readable form on your machine. Any other program you run or user with access to your machine can look through it.

The more fundamental problem is that Apple are collecting this information at all. Cell-phone providers collect similar data almost inevitably as part of their operations, but it’s kept behind their firewall. It normally requires a court order to gain access to it, whereas this is available to anyone who can get their hands on your phone or computer.

By passively logging your location without your permission, Apple have made it possible for anyone from a jealous spouse to a private investigator to get a detailed picture of your movements.

 

Want to see the hidden data for yourself? The secret information is actually stored inside \Users\<your user>\AppData\Roaming\Apple Computer\MobileSync\Backup [in Windows]. The names of the folders and the files within them are mostly random strings, but there are some index files like Info.plist and Manifest.mbdb. Load the most recent Info.plist into notepad to see what device it’s for. You should see a ‘Device Name’ value in the XML, make sure that it matches your iPhone.

The Manifest.mbdb and Manifest.mbdx files contain a listing of the real names of the files represented by random strings in that folder. You need a Python script to decrypt this one.

To simplify, there is an app already which does it for you – iPhone Tracker. It’s just a simple app that pulls the location data out of your saved iPhone files and displays the coordinates on a map.

 

However, users can opt-out of the tracking by turning off global Location Services on the device. That will, however, impact any third-party app like Facebook that wants to use location services.