Pentagon turns off advertising tracking on military-issued devices

Defense Department reduces ad-tracking exposure

The U.S. Department of Defense has disabled advertising tracking on government-issued phones and computers used by the U.S. Army, Air Force, Navy, Marine Corps and Special Operations Command. The measure covers managed iPhones, Android devices and Windows computers across the federal military enterprise network.

The action follows concerns that adversaries could use commercially obtained location data from mobile applications to identify and target U.S. personnel. Reuters reported that the protections were rolled out earlier this year, while the Air Force told Senator Ron Wyden that it implemented its changes in July.

Why advertising IDs create a location risk

Applications commonly collect location information and share it with third parties and data brokers. That information can then be sold on the commercial market. An advertising identifier can help connect location records to a particular device or individual, creating a potential route for tracking patterns of movement.

Disabling the advertising ID makes a person much harder to identify because the associated location data blends in with records from other devices on which the identifier is also disabled. The policy is intended to make it more difficult for hostile governments and other adversaries to turn commercial data into intelligence for attacks on bases or personnel in operational settings.

Policy closes one channel, not every exposure

Wyden raised the issue with military leaders after finding that unnamed foreign adversaries had targeted U.S. troops in the Middle East using commercially acquired location data. He welcomed the move to limit advertising tracking, but warned that personal devices carried onto military bases by troops and contractors could still expose people and facilities to attack.

The development also highlights the broader role of commercial location data in government activity. The U.S. intelligence community and the FBI have confirmed that they purchase such data for surveillance and intelligence collection without a warrant.

Implication for device management

For organisations with staff in sensitive locations, the Pentagon’s decision illustrates that advertising settings belong in operational security controls, not only privacy preferences. Device-management policies should account for managed hardware as well as the residual location-data exposure created by personal and contractor devices.