this post was submitted on 06 Nov 2026
29 points (93.9% liked)

Privacy

11130 readers
290 users here now

A community for Lemmy users interested in privacy

Rules:

  1. Be civil
  2. No spam posting
  3. Keep posts on-topic
  4. No trolling

founded 3 years ago
MODERATORS
 

I’m traveling to Barcelona and when I leave the train and walk on the platform I receive a notification from Cabify (Like Uber/Lyft) referencing the station where I am.

I only gave permissions of location only when using the app, and I did not used it in months.

How is it possible?

top 21 comments
sorted by: hot top controversial new old
[–] unexposedhazard@discuss.tchncs.de 24 points 1 day ago (3 children)

Your public IP is the one of the closest cell tower, but thats only enough to narrow it down to a city/neighbourhood. So probably by scanning the nearby wifi networks if it has network permissions.

[–] roofuskit@lemmy.world 6 points 1 day ago (2 children)

Is this an iPhone thing? Because Bluetooth and WiFi are tied to location permissions on Android because they can be used to determine your location.

[–] Jako302@feddit.org 2 points 1 day ago (1 children)

That hasn't been the case since android 13.

[–] roofuskit@lemmy.world 1 points 20 hours ago (1 children)

An app must ask your permission and you must grant it. And it explains exactly why in the permissions description. Because it may be used to determine your location.

[–] Jako302@feddit.org 1 points 6 hours ago

I know, I wasn't talking about permissions in general.

Bluetooth and WiFi aren't grouped in with location permissions since android 13, they both fall under nearby devices.

[–] ILikeTraaaains@lemmy.world 3 points 1 day ago

The location by IP is useless in my case, it usually says I’m in Barcelona, when I don’t even live in this region, and now that I’m there it says that Im in another city. 😅

[–] HelloRoot@lemy.lol 3 points 1 day ago (1 children)

It's not like that for me.

I was in another country recently (not neighbouring mine, there were 5 other countries in between)

And when on mobile data my ip location was the location of my telco, back in my home country.

[–] Pomal@sh.itjust.works 7 points 1 day ago (2 children)

Highly doubt your address is static across carrier infra across countries.

[–] ladel@feddit.uk 5 points 1 day ago (1 children)

Your public IP will be where it exits the carriers' private networks, right?. I learned about roaming in GSM networks long ago, and it at least used to be that all the traffic went through your home network if you're roaming abroad. If that's still the case, it would make sense to have a home IP even if abroad.

I don't believe each cell tower will have its own public IP, because if they did, cellular handover and all the clever stuff going on hidden from the users would be even more complex. Also exposing cell towers to the public internet sounds like a disaster.

[–] Pomal@sh.itjust.works 3 points 1 day ago

Nope the infrastructure owners network, not the carrier.

[–] HelloRoot@lemy.lol 2 points 1 day ago* (last edited 1 day ago)

You can doubt all you want, but I'm just telling you exactly how it is. I checked it in multiple ip location check services. They gave me an IP that was geolocated to my telco providers city.

[–] Uri@infosec.pub 8 points 1 day ago

ip, cellular, gps

[–] GreatBlue@infosec.pub 12 points 1 day ago (1 children)

Could be a Bluetooth beacon. Even if you turned Bluetooth "off" your phone still receives signals. Or the app can access the cell tower information even with location turned off.

Is your phone an Android or iPhone?

[–] ILikeTraaaains@lemmy.world 3 points 1 day ago

iPhone.

I think it might be the location trigger mentioned by artwork.

[–] artwork@lemmy.world 9 points 1 day ago* (last edited 1 day ago) (1 children)

Wonderful day!

I have no experience in iPhone much, like at all... but is it possible the app monitors Wi-Fi networks?
Also, I've just checked some documentation for the quite, sorry, limited and opinionated iOS environment:

UNLocationNotificationTrigger
A trigger condition that causes the system to deliver a notification when the user’s device enters or exits a geographic region you specify...

Create a UNLocationNotificationTrigger object when you want to schedule the delivery of a local notification when the device enters or leaves a specific geographic region. The system limits the number of location-based triggers that it schedules at the same time...

Because the system actually monitors the regions, you don’t need to request always permissions for your app...

Source

So, it may receive "notifications" while in background (not "when using the app"), too, it seems like.

There should be "App Privacy Report" for apps in settings (source), where location request history should be listed, too.

The ineffably marvelous Spain is a European country, so they should support GDPR, and you may write the organization about your location data stored/processed, to clarify it.

[–] ILikeTraaaains@lemmy.world 2 points 1 day ago

Maybe it is that, the app schedules notifications for the most important train stations and airports.

[–] artyom@piefed.social 6 points 1 day ago

Your IP address is the easiest and most common way.

[–] RodgeGrabTheCat@lemmy.ca 6 points 1 day ago (1 children)

The Hated One has a couple of videos on how a phone finds you location - there are 5 or 6 methods.

Youtube https://youtu.be/WkmTxBTe52o

Bitchute https://www.bitchute.com/video/WkmTxBTe52o

I was going to post the link to his older video but it was made 6 years ago.

[–] ILikeTraaaains@lemmy.world 3 points 1 day ago (1 children)

Thank you, I’ll check the video when it get some spare time

[–] RodgeGrabTheCat@lemmy.ca 1 points 22 hours ago

Your welcome. I hope the vid helps.