Your DMs Are For Sale And A Bunch Of Squares Already Bought Them

Fuck it. Let's get real. You think your messages and your movements are yours? Wrong. There's a price list. And somebody already bought the interesting parts.

There's a company called Babel Street. They rent out a tool called Locate X. You type in a name. You get a timeline of everywhere that person's phone has been. Mosques. Abortion clinics. Courthouses. Your ex's new apartment. No warrant. No notification. Nothing to tell you that you were ever searched at all.

That's not a leak. That's the product.

And before you ask — no. "Verified law enforcement only" is the marketing copy, not the access control.

The Store

Wait, no. "Store" flatters it. Stores ask you to pay on the way out. This thing bills you and quietly takes the inventory from your pocket.

Here's the whole supply chain. Every arrow is a company with a name you've never heard of:

• You install an app. Flashlight. Game. "Free" wallpaper junk.
• The app embeds an SDK — Kochava, X-Mode, and about a hundred like them.
• The SDK logs your precise location and device fingerprint. Continuously.
• SDK sells to aggregators. Aggregators sell to platforms.
• Platforms sell access. To police. To militaries. To whoever wires the invoice.

Nobody in this chain ever asked you a single question. That's not a bug in the pipeline. The pipeline IS the business.

The Buyers

You're picturing a detective with a badge. Fine. They buy too.

But here's who else. An investigator working for Atlas Privacy — a company whose entire product is helping people ESCAPE these databases — got a trial account on Locate X by asserting he might maybe work with law enforcement someday. That's the whole vetting process. An assertion.

Then he did what buyers do: pulled the location history of individual people walking into mosques, synagogues, courtrooms, and abortion clinics. Individually. By name. (You know how this ends. Or maybe you don't.)

If the privacy company can pass the vetting, so can the guy your landlord's lawyer hired. So can a jealous ex with a budget.

The Watchdogs

They know. They've known for years. Here's the report card anyway.

The FTC settled with Kochava in May 2026: banned from selling sensitive location data without express consent. Sounds real until you read the paperwork — the ban on using the data got stripped out on the way to the signature. Yale's regulation journal flagged it. Collection is fine. Use is fine. "Selling without consent" is the only crime, and there are no consent forms in this industry to violate.

PADFAA tells brokers not to sell your sensitive data to foreign adversaries. A strongly-worded letter to an unregulated industry.

And the Fourth Amendment Is Not For Sale Act — the bill that would require a warrant before the government buys your data out of a catalog — passed the House in 2024 and died in the Senate. Eight years of hearings. Letters. Cameras. The loophole is federal policy by attrition.

A warning label is not a ban. A fine is not a deterrent when the revenue is ten times the penalty.

The Real Cost

"But I use Signal. I'm fine." Congratulations. You missed the point by a mile.

The content of your messages is mostly safe from this pipeline. Everything around them is not. Who you messaged. When. From where. How often. What you tapped in the notification shade before typing a word. The metadata is the map, and the map is for sale to anyone who flunks the vetting correctly.

Every license plate they read chips away at anonymity. Every database they build becomes a weapon waiting for its moment.

(If you think this is coincidence, that every city rolled out the same systems in the same seasons with the same identical contracts, I've got a bridge to sell you. The bridge's location data is also for sale.)

Fighting Back

Not hopeless. Never hopeless. Just difficult.

1. Cut the tap tonight

Open your phone. Go app by app. Location, contacts, files: deny everything that doesn't need it to function. The SDK pipeline is permission-gated. A permission you revoke is a valve they can't sell from.

2. Move the org to Signal

Actually move it. Not the group chat you check on weekends. The organizing one. Signal for content, cash where you can, and quit posting your location in real time like the surveillance state is a follower you're trying to impress.

3. Make the paperwork hurt

FOIA your own city: police data purchases, vendor names, contract dollar figures. Surveillance hides in page 847 of the budget. Light kills the page. Some cities have already banned the tech entirely — because voters filled the seats.

4. Name the bill

Call your reps about the Fourth Amendment Is Not For Sale Act. Not "privacy bad." The bill, by name. Senate inertia breaks on named bills with voters attached.

Pick two. Tonight. Not after the next election.

The Bottom Line

Nobody kicked your door in to take your data. You installed a game. You kept the default permissions because the dialog was small and the other thing you were doing was more interesting. That's the design, not your guilt. The consent was engineered out of you one modal at a time.

Which means the pressure point is the same place. They need the taps flowing.

They want your location. They want your network graph. They want the version of refusal that's still profitable.

Don't give it to them.

They'll call this paranoid. Good. Paranoid is rational when they're actually buying you.

Be expensive to surveil. Make them pay full freight for a trickle instead of harvesting a river.

Rise and Resist.

Posted by someone who reads the receipts. Word count: ~1,250.

Sources

1. 404 Media. "Inside the U.S. Government-Bought Tool That Can Track Phones at Abortion Clinics." October 2024.
2. The Verge. "An investigation exposes data brokers using ads to help track almost anyone." October 2024. (Atlas Privacy / Babel Street Locate X trial access.)
3. Haaretz. "In Israel, It's Closely Guarded Tech. In America, Anyone Can Use It to Spy on a Synagogue." October 2024.
4. EFF. "Creators of This Police Location Tracking Tool Aren't Vetting Buyers. Here's How To Protect Yourself." November 2024.
5. Federal Trade Commission. "FTC to Ban Kochava and Subsidiary from Selling Sensitive Location Data." May 4, 2026.
6. Yale Journal on Regulation. "FTC's Kochava Settlement Advances Data Privacy Enforcement — But Leaves Critical Gaps in Protecting Consumers." 2026.
7. Congress.gov. H.R. 4639, the Fourth Amendment Is Not For Sale Act. 118th Congress. (Passed the House; no Senate action.)
8. Criminal Legal News / Brennan Center. "Surveillance for Sale: The Data Broker Loophole and the Fourth Amendment After Chatrie." July 2026.