harry Profile picture
purveyor of fine osint techniques | harry@covertlabs.io
Jan 22 9 tweets 4 min read
In my previous post, I demonstrated how Waze user data can be scraped from the public web map to track individuals.

But I glossed over something important: what does Waze's own privacy policy say about your data?

I went through the full policy. Here's what stood out. Image 1. They Track You Even When You're Not Using the App

From the policy:

"GPS signals (combined with a time-stamp), IP address and other information from sensors"

And crucially:

Collection occurs "also while you are not using the app"

This means Waze can collect location data in the background. You don't need to have the app open.Image
Jan 22 11 tweets 4 min read
millions of people doxxing themselves everyday without even knowing. If you spend the time analysing reports, you can determine where somebody lives and works.
Image
Image
Image
A few people asking why Waze has usernames in the first place.

Short answer: Waze was never just a nav app - it was built as a social network for drivers.

The username system is baked into everything.
Jan 22 9 tweets 2 min read
x.com/i/article/2014… Since this is getting attention - some context on why Waze even has usernames attached to reports in the first place.

It wasn’t an oversight. Waze was designed from day one as a social platform, not just a navigation app