Android app developers may be unwittingly sharing their users’ location data with advertisers

EFF analysis found that many mobile apps’ third-party advertising SDKs inherit app-level location permissions and, unless developers explicitly disable it, can collect and share users' precise location data with advertisers and data brokers. This behavior—observed in widely downloaded Android apps and described as reaching billions of users via tens of thousands of apps—creates significant privacy and security risks if the aggregated location data is sold, misused by governments or intelligence actors, or exposed in breaches.