The exploitation of commercial data by hostile parties represents a serious intelligence threat that forces the military establishment to reevaluate digital advertising technologies.
Article index:
- Disabling ad trackers on government devices
- An intelligence security vulnerability known for years
- Lawmakers’ warnings and field threat reports
- A history of leaks via fitness and data apps
- Upcoming demands to ban trackers on personal phones
- Frequently asked questions
Disabling ad trackers on government devices
Multiple branches of the US armed forces have disabled ad tracking identifiers on smartphones and computers designated for military and government purposes. This follows reports that hostile foreign entities exploited commercial location data available for purchase in open markets to target and monitor US forces deployed in the Middle East, according to Reuters and parliamentary correspondence published by Senator Ron Wyden on Friday.
The US Air Force confirmed to Senator Wyden that it turned off ad identifiers on computers and mobile phones about two months ago, while Special Operations Command stated in a separate letter that it recently disabled those identifiers across all its devices running the Windows operating system. Meanwhile, the US Army explained that these identifiers have been disabled by default on Android and Apple devices since at least February 2026, while they have been blocked on Windows computers since before 2021.
An intelligence security vulnerability known for years
These measures come after months of intense pressure exerted by Senator Wyden and a group of lawmakers in the US Congress. Last May, a bipartisan group of 14 members issued a stern warning to the Pentagon, pointing out that the department has yet to take basic steps to protect military personnel from serious counter-intelligence threats resulting from the collection and sale of sensitive personal data and information.
In an official letter attached to that warning, US Central Command confirmed that it had indeed received numerous threat reports concerning adversaries exploiting commercial location data to track and target US service members and monitor their movements in active operational theaters.
Lawmakers’ warnings and field threat reports
Digital advertising networks regularly and systematically collect precise geographic location data from popular mobile apps, then transfer it to data brokers and information intermediaries who offer it for sale in open markets without strict security controls. Disabling a device’s ad identifier makes tracking individuals and sorting their data extremely difficult and complex, as the device’s records are automatically mixed and merged with the data of millions of other users who also chose to turn off ad tracking features.
Senator Wyden emphasized in press statements that it is time to treat the digital advertising industry as an explicit national security threat, confirming that both the Navy and Marine Corps have also confirmed disabling identifiers on military devices, although an exact implementation date was not specified.
A history of leaks via fitness and data apps
Vulnerabilities stemming from commercial data have been documented and known in military circles for nearly a decade. In 2018, the British newspaper The Guardian revealed that heatmaps and aggregated data from the fitness app Strava exposed the locations of US military bases and top-secret operations stations in conflict zones.
In 2021, The Wall Street Journal reported that a military contractor discovered the ability to track troop movements through data flowing via commercial apps. Furthermore, Wired magazine showed in 2024 how entities were able to exploit available commercial data to precisely locate military contractors inside sensitive facilities in Germany.
Upcoming demands to ban trackers on personal phones
Despite the importance of the steps taken so far, they remain limited to government-issued devices assigned to military personnel, while personal phones carried by soldiers while serving abroad remain an active vulnerability. Therefore, lawmakers have demanded that the Pentagon require service members to disable ad identifiers on their personal phones immediately upon entering sensitive bases or deploying on overseas missions.
Recommendations also included replacing default web browsers with privacy-focused alternatives that automatically block tracking mechanisms, pending whether the Department of Defense will decisively adopt these mandatory measures to protect its soldiers.
Frequently asked questions
Question: Why did the US military decide to disable ad tracking identifiers?
Answer: To prevent adversaries and foreign entities from exploiting commercially purchased location data to target soldiers and bases.
Question: How does stopping the ad identifier protect service members’ privacy?
Answer: It prevents linking app activity to a specific identity and merges location data with the data of millions of other users.
Question: Do the current decisions include soldiers’ personal phones?
Answer: Current measures are limited to officially issued devices, with demands to enforce them on personal phones.
