The Supreme Court just decided your phone's location history is yours, not the government's to grab

Cybersecurity 4 min 33 sources

A 6-3 ruling says police need real Fourth Amendment protection before sweeping up everyone near a crime scene from their phones — the first big update to digital privacy in years, with the line drawn at the most ordinary thing your phone does: knowing where you are.

Key takeaways

The US Supreme Court ruled 6-3 that police mass-grabbing phone location data from everyone near a crime scene is a search the Constitution protects against — the biggest digital-privacy ruling in years.
The case turned on a "geofence warrant," which flips policing backwards: instead of "where was this suspect," it asks "who was here?" and makes a tech company hand over everyone who matches.
The hinge was an ordinary toggle — Google's "location history," which it repeatedly nudged users to switch on — proof that a privacy default you forgot about can quietly become a decision that matters enormously.

The US Supreme Court ruled Monday that when police pull phone location data from everyone in a chosen area, that’s a search the Constitution protects against — and they can’t treat it as a free grab [6][18][28]. The 6-3 decision in Chatrie v. United States is the most consequential digital-privacy ruling in years, and it turns on the most ordinary thing your phone does: quietly recording where you’ve been [18].

What the case was

The fight was over a “geofence warrant” — a tool that flips normal police work backwards [6]. Usually police have a suspect and ask, “where was this person?” A geofence warrant asks the reverse: “who was here, in this circle on the map, during this window?” — and makes a tech company hand over everyone who matches [6].

In this case, Richmond, Virginia police chasing a bank robber who fled with $195,000 drew a virtual fence around the bank and made Google produce the phones that had been inside it [6]. One of them belonged to Okello Chatrie, who had switched on Google’s optional “location history” feature that logged his position every few minutes [6]. He was convicted and is serving 12 years; his lawyers argued the dragnet violated the Fourth Amendment — the constitutional right against “unreasonable searches” [6].

What the Court actually decided

The justices agreed with him, 6-3 [18]. Writing for the majority, Justice Elena Kagan said people keep a “reasonable expectation of privacy” in their phone’s location records, even when they’re out in public — so police “intrude on that constitutionally protected interest when they demand the information” [6][18]. Her sharpest line: “A new technology should not transform what individuals had reasonably thought they could withhold from the Government” [18].

The Court did not throw out Chatrie’s conviction — it sent the question of whether this particular warrant was proper back down to a lower court [18]. What it settled is bigger: this kind of mass location grab is a search, so the Constitution’s rules now apply to it [6].

The doctrine it bent

The government’s argument rested on something called the third-party doctrine — a decades-old idea that once you voluntarily hand information to a company, you’ve given up your privacy in it [18]. By that logic, because you let Google keep your location, you can’t complain when Google passes it on [6].

The majority rejected the “voluntary” framing as out of touch with how phones actually work. The dissent — surprisingly — agreed on that narrow point: people don’t choose to broadcast their lives “just by doing the ordinary thing cellphone users do,” they wrote, noting that Google “repeatedly prompts users to turn on the service, often warning that devices will not ‘work correctly’ otherwise” — without saying how often it would record them or that the government might one day ask for it [6].

Why the scale matters

Geofence warrants are not rare, and they are not precise [6]. Google itself acknowledged in court that these searches “often run a high risk of sweeping in innocent users — sometimes thousands of them,” routinely covering private homes, apartment buildings, places of worship, and busy roads police had no specific reason to suspect [6].

Justice Sonia Sotomayor spelled out the stakes: even short tracking can reveal a person’s trips to “the psychiatrist, the plastic surgeon, the abortion clinic, the AIDS treatment center… [or] the by-the-hour motel” [6]. Roughly one-third of active Google account holders had location history switched on — which one court filing put at more than 500 million people worldwide [6].

The limits, and the dissent

Privacy advocates called it a “major win,” but a real one with edges [18]. Law professor Andrew Ferguson noted it will still be “easy for law enforcement to obtain warrants in other ways” — the ruling raises the bar, it doesn’t close the door [18]. And Google has already changed its system so it can’t answer most government location requests at all [18].

Justice Samuel Alito, dissenting, warned the decision “will send seismic waves through our Fourth Amendment doctrine” and “all but guarantees that we will be cleaning up debris for the foreseeable future” [18]. The split didn’t fall along the usual party lines — Justice Neil Gorsuch agreed with the result but on different reasoning, calling your location data simply your “personal property” [18].

What it means for you

You don’t need to do anything today — this is a ruling, not a breach [28]. But it’s a reminder worth acting on: the “location history” toggle on your phone is the exact feature this whole case turned on. On Android, it lives under Settings then Location; on an iPhone, under Settings then Privacy then Location Services [6]. Knowing it’s off — or knowing what you’ve agreed to keep on — is the practical version of the right the Court just affirmed. The lesson underneath: a privacy setting you forgot you turned on can become the most consequential decision you never thought you made [6].

02 · Lesson · why it matters

The most important choice you make is the one you forget you made

A privacy setting becomes a default, a default becomes a habit, and a habit becomes a thing the law has to decide for you — because you stopped deciding it long ago.

A toggle you don’t remember flipping

Somewhere in your phone’s settings is a switch called “location history.” Most people who have it on never chose it the way they’d choose a house or a job. They tapped “allow” on a prompt that kept appearing, that warned the phone might not “work correctly” otherwise, and then they forgot it existed.

That toggle is the entire reason a bank robber in Virginia ended up at the center of the most important digital-privacy ruling in years. The police didn’t crack his phone. They asked Google a question — who was near the bank? — and his forgotten setting answered for him.

The lesson here isn’t about him. It’s about the toggle, and how a thing you decide once, casually, can quietly become the thing that decides for you.

What a default really is

A default is a choice someone else made about what happens when you don’t choose. Leave the setting alone, and the default acts in your place — every minute, for years, without asking again.

This is not an accident of design. The dissenting justices noted that Google “repeatedly prompts users to turn on the service,” nudging until you say yes, while not mentioning how often it would record you or that the government might one day come asking. The prompt was built to win. The default it produced was built to stick.

And it worked at a scale that’s hard to feel. Roughly a third of Google account holders had this on — more than half a billion people. Each one made the same small, forgotten decision. None of them pictured a courtroom.

The rule that posed as a fact

Under the default sat something even older: a legal idea called the third-party doctrine. It says that once you hand information to a company, you’ve given up your privacy in it. Tell your bank, your phone company, your email provider something, and — by this logic — you’ve told the world.

That sounds like plain common sense. It is not. It is an arrangement, built by courts decades ago for a world of paper records and rotary phones, that happens to put the advantage with whoever wants your data. It poses as the nature of things. It is actually a choice about who holds the upper hand — and for forty years, that wasn’t you.

What the Court did this week was notice the disguise. A new technology, Kagan wrote, “should not transform what individuals had reasonably thought they could withhold from the Government.” Translated: the fact that your phone now remembers everything doesn’t mean you signed away the right to keep it.

Who got swept in

The quiet thing about a default at scale is that it doesn’t stop at you. A geofence warrant doesn’t ask for one suspect — it asks for everyone inside a circle on a map. Google admitted these searches “often run a high risk of sweeping in innocent users — sometimes thousands of them,” over homes, churches, hospitals, and busy roads.

So the person whose forgotten toggle matters most might not be the suspect. It might be the stranger who happened to be buying coffee nearby, whose trip to — in Sotomayor’s list — “the psychiatrist, the abortion clinic, the AIDS treatment center” is now in a police file because of a fence they never knew they walked into.

You are somewhere in that web. Not as the watcher and not as the watched, exactly, but as one more person carrying the same phone, with the same toggle, near the same kinds of circles. The cost of the default was never paid only by the people who set it.

What seeing the whole leaves you with

The ruling raises the bar. It does not close the door — police can still get this data other ways, and law professor Andrew Ferguson was clear that “it will still be easy for law enforcement to obtain warrants.” A single decision, however large, only cleans up part of a structure that took decades to build, and that almost no single person can see the full shape of.

That’s the humbling part. The doctrine, the prompt, the toggle, the warrant, the half-billion forgotten choices — they connect into a system no judge, no engineer, and no phone owner designed on purpose or fully controls. Each seat sees one piece. The Court saw a little more of it this week and called the disguise a disguise.

You can’t unbuild that system. But you can do the small, real thing it points to: open the settings, look at what you left on, and decide it on purpose this time. The choice you forgot you made is still yours to make again.

03 · Lab · your turn

The Default You Forgot

Set one privacy toggle, live an ordinary week, then watch a geofence sweep decide whether your forgotten default put you in the file.

04 · Hope · carry this

The law is slow, but it moves — and this week it moved to keep something ordinary in your hands instead of someone else's. When the rules built for an older world stop fitting, people do find the will to rewrite them.