Recurring nighttime coordinates alone can reveal exactly where someone lives and works
Aliases: location privacy · mobility trace · home inference
What it is
Precise location data is not merely an anonymous point. Recurrent nighttime coordinates, weekday stops, and linked trajectories can reveal a home, workplace, and routine; cross-referencing public information can then re-identify a person. Removing names alone does not eliminate location-privacy risk.
Why it happens
Movement is structured rather than random. Activity range, timing, and a few recurring places form a distinctive behavioral signature. One point can be vague, while many timestamped points become linkable. A map lowers the effort of exploiting that combination by making stops, returns, and co-occurrence visible at a glance.
Where it stops holding
Risk depends on precision, sampling frequency, time span, regional density, and available auxiliary data; a one-off coarse report is not a full trajectory. A public location does not necessarily reveal identity, but that does not make every record safe. Hidden points can still leak through query, export, and time-animation interactions.
Applying it
- Audit coordinate precision, timestamps, and linkable fields before mapping; ask explicitly whether a home or routine could be inferred.
- Avoid individual trajectories by default; use time-window and area aggregates, and restrict fine-grained export.
- Verify from an internal attacker perspective whether a known place can be stably linked to one record. If it can, aggregate further or do not publish.
Related
- Same group: U12.06.2 Aggregating to areas can reduce re-identification risk · U12.06.3 Sparse regions can remain uniquely identifying after aggregation · U12.06.4 Location jitter introduces false conclusions at small scales · U12.06.5 Aggregation granularity must be set by the sparsest region, not average density
- Nearby: U12.03.1 Point density can expose sampling and event distributions · U8.05.3 Interactive filtering can expose small groups to identification risk
- Search terms:
location privacy·mobility trace·home inference
Cards in the same group
- U12.06.2Rolling precise points up into area counts can hide individuals inside a shared number
- U12.06.3In a sparsely populated area, an aggregated count can still point to exactly one person
- U12.06.4Randomly shifting coordinates to protect privacy can make a point look like it's on the wrong side of a road
- U12.06.5Aggregation granularity must be set by the sparsest region, not average density