top of page

How Uber seems to know where you are – even with restricted location permissions

  • Writer: ESET Expert
    ESET Expert
  • 14 minutes ago
  • 3 min read

ree

Is the ride-hailing app secretly tracking you? Not really, but this iOS feature may make it feel that way.


When you land at an airport, you may be greeted with a notification on your phone that reads:

“Welcome to [your location] – Open the app to get directions to the Uber pick-up point.”

For privacy-conscious users who only allow apps to access their location while the app is in use, this can feel unsettling. How could Uber know where you are if you restricted the app to access your location only while in use?

ree

After seeing the message several times, I finally checked Uber’s permissions, certain it was set to only “while using the app” on both my personal and business phone. And indeed, Uber’s location access was set exactly as intended: “while using the app”.


And yet, both devices displayed the same notification whenever I landed, and getting this permission wrong on two devices seemed highly unlikely. (As an aside, why there are other

options beyond this one is baffling. Why do any car service or food apps need to know your location when you are not actively using them – other than to track you for commercial reasons?)


ree


The only other reason for what some might view as a privacy infringement could be a feature called “Background App Refresh”, which allows an app to run and update its content even when you’re not using it. On the other hand, this would be against the principle of limiting location access to only while the app is in use, and it seems implausible that any app, especially on iOS, would be allowed to bypass such a fundamental privacy control.


So, how does Uber (and perhaps other apps) know where you’ve just landed?

The answer lies in a feature called “UNLocationNotificationTrigger” that Apple provides to developers. This feature allows an app to fire a per-configured notification when the device enters or exits a specified geographic region, such as an airport. That way, it effectively circumvents the intent behind the “while using the app” setting.


So, to answer the question above directly: no, Uber or other apps don’t know your location when you land. The notification is generated locally on your phone when it detects that you’ve entered the per-defined airport’s Geo fenced area.


On the other hand, the notification’s wording is misleading: it makes it feel like Uber is actively tracking you and is offering guidance. In reality, it’s only when you tap the notification and open the app that your device shares your location with the app.


There are legitimate reasons for Geo fencing, of course. For example, a family safety app may notify parents when their child’s device enters or exits a designated safe zone such as a school or home. Or to use another example, a smart-home app could remind you to switch off the lights when you leave the house.


However, using the same mechanism for what can only be seen as advertising is, in my opinion, an overreach. In this instance, Uber is advertising its services as soon as I am within the boundaries of the airport. Imagine walking through a high street and having every retailer’s app ping you to come inside, basically ignoring your decision to share your location only when you’re using their app.


It would seem sensible for Apple to tighten the rules around location-triggered notifications and restrict them to non-advertising purposes. This would ensure that the notifications are limited to functionality that serves the user and is not used for monetization purposes.

 
 
 

Comments


bottom of page