FTC bans X-Mode from selling phone location data, and orders firm to delete collected data

The U.S. FTC issued a first-of-its-kind order against data broker X-Mode (Outlogic), banning the sale or sharing of sensitive location data, requiring deletion of previously collected data absent consent or de-identification, and mandating stronger privacy safeguards. The action cites sales of precise location data that could reveal visits to sensitive locations (e.g., medical, religious, domestic abuse shelters) and inadequate user disclosure, while Outlogic disputes any misuse. The order also requires controls to prevent associating data with LGBTQIA+ service locations, easy consent withdrawal, and a comprehensive privacy program, following earlier scrutiny from Apple, Google, and lawmakers.