Most people understand the implications of virtual meetings through emails and phone calls. Some of us are even aware that they are being constantly tracked. However, we assume that our physical meetings remain private. It is extremely unlikely that someone would follow everyone around all the time. Thus we seem to care less, if not at all, about the privacy of our physical meetings.

Multiple systems collect location data at scale. Telecom, tech companies, and governments log user location with more precision than most people expect.

Tracking technologies: Cellular location identification, GPS systems, Wi-Fi Localization

Google was found to be collecting location data from Android devices even when GPS was explicitly turned off, potentially affecting over two billion monthly active users worldwide.

You’d think this volume of data, spanning zettabytes, is too much to make any sense out of. There has been research into location privacy and customer pushback has led to adoption of privacy techniques into how some companies collect data.

But scale and algorithms are good at exactly this kind of problem. Patterns that would be invisible to a human analyst combing through raw data are easy for machines to pick out. Moreover these privacy techniques are at a relatively nascent stage and they do not hide everything about the user.

Recent research shows that location data alone is enough to piece together who you know, where you go, and when you meet. With enough data, it’s possible to infer social connections across large populations.

Moving user co-location map A tracked user labelled T and 30 numbered contacts move through a street network. Between five and ten of the contacts, chosen when the page loads and not marked in any way, are the tracked user's actual friends: when one of them comes into range it heads over, the tracked user pauses until it arrives, and the two walk the same streets shoulder to shoulder for a few seconds before it goes on its way. A contact is red only while it is genuinely walking along. Everyone else simply passes close by, and every one of those passes is counted as a co-location too. The panel below the map plots only the real ties: a node per person who has walked with the tracked user, and a line that darkens and thickens the more often they do. 0 IN RANGE 0 entries · 0 together INFERRED SOCIAL NETWORK a tie darkens and thickens the more often the two walk together T nobody has walked with T yet

Two people who meet frequently are likely connected — friends, relatives, co-workers, partners. Where and when they meet can reveal the nature of the relationship. Frequent meetings at a coffee shop near an office might indicate colleagues, while a weekly visit to a hospital might indicate a health situation.

Working with the InfoLab at USC, my thesis introduced this problem and proposed methods to preserve the privacy of meetings. The core idea is co-location k-anonymity: if you’re going to release location data, make sure any meeting implied by the data could plausibly involve at least k different people, so no specific pair can be singled out. The work was published in IEEE TKDE.