The US military has quietly disabled ad tracking on thousands of government-issued phones and computers, a move that signals a major shift in how the Pentagon treats commercially available location data as a threat to operational security. Following months of pressure from Senator Ron Wyden, the Army, Air Force, Navy, and Special Operations Command have confirmed they turned off advertising IDs on official devices. The decision came after intelligence reports suggested that American forces in the Middle East were being targeted through the same kind of location data that feeds the digital advertising industry — data that can be bought by anyone with a credit card.
What Exactly Is a Mobile Advertising ID and Why Does It Matter for National Security?
Every smartphone sold today carries a unique identifier designed for advertisers. Apple calls it the Identifier for Advertisers, or IDFA; Google calls it the Google Advertising ID, or GAID. This string of characters is tied to your device and allows ad networks to recognise you as you move between apps. Most apps quietly share this ID with third-party companies, from which it can flow into the hands of data brokers who routinely buy and sell this kind of information.
By itself, a mobile advertising ID reveals little. But when combined with the location data that many apps also collect — often with permission buried in lengthy terms of service — it becomes a precise mechanism to track where a particular phone goes, day and night. For a military force operating in hostile territory, that information is a goldmine for adversaries. US Central Command warned in April of “multiple threat reports concerning adversary exploitation of commercial location data.” It is the exact kind of intelligence an enemy state would want before aiming a drone or missile.
How Does an Advertiser Track a Phone Without the User Knowing?
The process is largely invisible to the average user. When you install an app, it may request permission to access your location. Even if you grant it only while using the app, the app can still read the advertising ID at any time. That ID, along with a timestamp and approximate coordinates, is sent to an ad network or a data broker. Over days and weeks, a pattern emerges: where you sleep, where you work, where you go for lunch. For a soldier deployed overseas, that pattern can reveal base locations, patrol routes, and even personal habits. The US military’s decision to disable advertising IDs on government-issued devices is a direct acknowledgment that this data pipeline is a vulnerability.
Senator Wyden’s Campaign and the Pentagon’s Response
Senator Ron Wyden has been pressing the Pentagon to act on this issue for months. Along with Representative Pat Harrigan, he wrote to the Pentagon’s inspector general last week asking for an investigation into whether the armed forces have properly countered the risks that their location data is being traded. The release of the military’s confirmation that advertising IDs had been disabled came through letters made public by Wyden’s office. Representative Harrigan told Reuters: “Our enemies should not be able to pull out a credit card and buy information that helps them track American troops.”
The military branches did not announce the change publicly. The letters were the first official confirmation that the Army, Air Force, Navy, and Special Operations Command had taken the step. The Pentagon has not released a timeline for when the changes were implemented, but the move aligns with growing concerns across the intelligence community about the commercial data market.
Why Did the US Military Disable Ad Tracking on Government Phones?
The US military disabled ad tracking on government-issued phones and computers because commercially available location data was being used to target American forces in the Middle East. Intelligence reports indicated that adversaries were exploiting mobile advertising IDs and location data collected by apps to track the movements of military personnel. Disabling the advertising ID on official devices removes one of the key mechanisms that data brokers and hostile actors use to link location data to a specific individual or device.
Beyond Government Devices: The Personal Smartphone Problem
The Pentagon’s action addresses only government-owned equipment. It does nothing about the personal smartphones that troops carry off-duty, which are often just as vulnerable. In July, Reuters reported that troops in Jordan had been told their personal devices would be confiscated to prevent adversaries from accessing “reactions, photos, and footage from the cellphones of our troops.” At the end of last month, the US Navy instructed personnel to clean up their social media profiles, warning that adversaries were exploiting open-source intelligence.
These incidents highlight a broader problem: even when official devices are secured, the human factor remains. A soldier who posts a selfie with a geotag, or uses a fitness app that logs running routes, can inadvertently reveal sensitive location data. The military’s decision to disable ad tracking on official devices is a necessary step, but it is not a complete solution. The personal smartphone ecosystem remains a sprawling, largely unregulated market for location data — and it is one that adversaries are learning to exploit.
The Commercial Data Market: A Billion-Dollar Intelligence Goldmine
The advertising ID and location data market is enormous. Data brokers aggregate information from thousands of apps, then sell it to anyone willing to pay — including marketers, insurers, and, as it turns out, foreign intelligence services. The US military’s own warnings suggest that adversaries are not necessarily hacking into secure military networks; they are simply buying data that is already legally collected and sold. This is a relatively new kind of threat, one that traditional counterintelligence methods were not designed to address.
Questions about the scale of the trade remain. Senator Wyden and Representative Harrigan have asked the Pentagon’s inspector general to investigate whether the armed forces have adequately mitigated the risks. Their letter specifically asks whether the Pentagon has taken steps to prevent location data from military personnel’s personal devices from being sold. The answer, so far, appears to be that the military is playing catch-up.
How Does Apple’s IDFA and Google’s GAID Compare in Terms of Privacy?
Both Apple and Google provide users with the option to limit or disable ad tracking. Apple’s App Tracking Transparency framework, introduced in iOS 14.5, requires apps to ask for permission before tracking the user’s IDFA across other apps and websites. Google’s Android, meanwhile, has long allowed users to opt out of ad personalisation, but the GAID is still accessible to apps unless the user deletes it entirely. Recent versions of Android allow users to delete the advertising ID altogether. The US military’s decision to disable these IDs on government devices is effectively applying the most restrictive possible setting.
What This Means for the General Public
The threat is not limited to the military. Any member of the public may dislike the amount of information their phone is collecting and potentially sharing with data brokers. You do not need to be near the front line of an international conflict to take action to better defend your privacy. The same vulnerabilities that allow an adversary to track a soldier can also allow a data broker to build a detailed profile of a civilian’s daily life — where they live, work, shop, and socialise.
Fortunately, the steps to disable ad tracking are straightforward and have been available for years. On an iPhone, go to Settings > Privacy & Security > Tracking, and switch off “Allow Apps to Request to Track.” On Android, head to Settings > Privacy > Ads. Recent versions should let you delete your advertising ID entirely. Taking these steps will not stop every way you can be tracked, nor will it do anything about data that has already been collected. But it is a simple measure that helps prevent further information sliding from your life into a data broker’s database.
What Are the Practical Steps to Disable Ad Tracking on an iPhone or Android?
On an iPhone, open Settings, tap Privacy & Security, then Tracking, and toggle off “Allow Apps to Request to Track.” On Android, navigate to Settings, then Privacy, then Ads. On recent Android versions, you will see an option to delete your advertising ID entirely. These actions prevent apps from accessing the device’s unique advertising identifier, making it much harder for data brokers to link your location data across different apps.
Historical Context: The Military’s Slow Awakening to Commercial Data Risks
The Pentagon’s concern about commercial location data is not new. In 2018, it was revealed that a fitness app called Strava had published a heat map that inadvertently revealed the locations of secret military bases when soldiers used the app to log their runs. The incident sparked a wave of internal reviews, but the broader issue of data brokers selling location data persisted. The difference today is that adversaries have become more sophisticated at acquiring and exploiting this data. The warnings from US Central Command in April 2026 suggest that the threat has moved from theoretical to operational.
The military’s decision to disable advertising IDs on government devices is a direct response to those warnings. But it also reflects a deeper shift in how the Pentagon views the digital economy. No longer can the military treat commercial data as a benign byproduct of consumer technology. It is now a vector for intelligence gathering, and the Pentagon is fighting a war on two fronts: one against enemy combatants, and another against the data brokers who sell information to the highest bidder.
What Still Needs to Be Done
While disabling advertising IDs on official devices is a positive step, it is only a partial fix. The letters released by Senator Wyden’s office ask the Pentagon’s inspector general to investigate whether the military has addressed the risks from personal devices, social media use, and third-party apps. The US Navy’s recent order to scrub social media profiles indicates that the military is aware of the problem, but enforcement remains inconsistent. The challenge is cultural: troops are accustomed to sharing their lives online, and it is difficult to police behaviour that happens off-duty.
Legislative action may also be necessary. Representative Harrigan and Senator Wyden have signalled that they intend to keep pushing for stronger oversight of the commercial data market. A bill that restricts the sale of location data without the user’s explicit consent could have far-reaching implications for both the military and the general public. For now, the military’s own actions serve as a model for what individuals can do on their own devices.
Taking the Lesson Home
The US military’s decision to disable ad tracking on government phones is a rare public acknowledgment that the tools of digital advertising have become tools of surveillance. If the armed forces — with all their resources and security protocols — see the advertising ID as a threat, the average person should consider doing the same. The steps are simple, the cost is zero, and the benefit is a measurable reduction in the amount of data that flows from your phone into the hands of companies you have never heard of. If it is good enough for the US military, it might be good enough for you too.
