← all posts

Everything Your Phone Carrier Knows About You

You probably know your carrier collects some data. Most people think it’s limited to billing information and basic call records. The reality is much worse than that. Your carrier has a more complete picture of your daily life than almost any other company, including Google and Facebook.

Here’s what they actually collect and what they do with it.

Your location, all the time

Every time your phone connects to a cell tower, your carrier logs it. That happens constantly, not just when you make a call. Your phone pings towers in the background to maintain its connection to the network. Each ping creates a location record with a timestamp.

From these records, your carrier knows where you sleep every night. They know where you work. They know your commute route and what time you leave in the morning. They know when you deviate from your routine. They know when you visit a hospital, a lawyer’s office, a protest, or anywhere else you might consider private.

This isn’t a hypothetical concern. AT&T, T-Mobile, Verizon, and Sprint were all caught selling real-time customer location data to third-party brokers. That data ended up in the hands of bounty hunters, stalkers, and random companies that customers had never heard of. The FCC fined the carriers nearly $200 million, but that amount is pocket change compared to their quarterly revenues. The financial incentive to keep collecting hasn’t gone away.

Who you talk to and when

Every phone call generates a record: the number you called, the number that called you, the time it started, how long it lasted, and whether it was answered. Every text message logs the sender, the recipient, and the timestamp.

Your carrier doesn’t need to listen to your calls to learn a lot about your life from this metadata. Call patterns reveal your closest relationships. Frequent calls to a specific number at certain times of day paint a clear picture. A sudden change in calling patterns can indicate a life event. Researchers have shown that phone metadata alone can be used to infer medical conditions, political affiliations, and relationship status.

Law enforcement knows this too. Carrier metadata is one of the first things requested in investigations, and carriers keep these records for years. T-Mobile retains call detail records for at least 7 years. AT&T keeps them for up to 7 years as well. That means a government request today can pull up who you called on a random Tuesday three years ago.

Your browsing and app data

This one surprises people the most. Verizon runs a program called “Custom Experience” that tracks which websites you visit, which apps you use, and what content you interact with. The purpose is to build an advertising profile they can monetize. You can opt out, but the program is enabled by default and the toggle is buried deep in your account settings.

T-Mobile has similar data collection programs. They track app usage, browsing categories, and device analytics. AT&T has historically done the same. The carriers argue that this data is “anonymized,” but repeated studies have shown that supposedly anonymous location and browsing data can be de-anonymized by cross-referencing it with other data sources.

Data retention is the quiet problem

Even if you trust your carrier not to sell your data today, the fact that they store it for years creates risk. Data that exists can be breached, subpoenaed, or sold under a future policy change.

Carriers respond to hundreds of thousands of law enforcement requests per year. The vast majority of these are for historical records, not real-time surveillance. They’re asking for data that was collected months or years ago and has been sitting in a database ever since.

This is where data retention policy becomes the real privacy question. It doesn’t matter how secure a database is if the data in it is available to anyone with a court order, and sometimes without one. Carriers have complied with requests that didn’t have proper legal authorization, and the penalty for doing so has historically been minimal.

What Cape does differently

Cape takes a different approach by limiting what they collect and how long they keep it. Call logs are deleted after one day, which means the vast majority of historical data requests simply can’t be fulfilled. There’s nothing to hand over.

IMSI rotation breaks the chain of location tracking. Instead of one permanent identifier following you from tower to tower for years, Cape changes your network identifier every 24 hours. Historical location patterns become fragmented and much harder to reconstruct.

There are no advertising profiles. No “Custom Experience” programs. No data broker partnerships. Cape doesn’t build a behavioral model of you because that’s not how they make money. They charge $70 a month and that’s the entire revenue model.

Private payment means you don’t even need a real name or credit card on your account. At a traditional carrier, your identity is the first thing they collect. At Cape, it’s optional.

None of this is secret

The carriers don’t hide that they collect this data. It’s all described in their privacy policies, which are long enough that nobody reads them. The problem isn’t that they’re being deceptive. The problem is that most people don’t realize the scale of what’s being collected or what it reveals about their lives.

Once you understand that your carrier has a near-complete record of where you’ve been, who you’ve talked to, and what you’ve looked at online, for years, the question isn’t whether that bothers you. It’s what you’re going to do about it.

Get $20/month off Cape

If you want a carrier that doesn’t treat your data as a revenue stream, grab a free referral code at cape.rip before signing up. It takes $20 off your monthly bill permanently, and the person who shared the code saves $20 too. No signup, no tracking. Just pick a code and use it at cape.co. Cape’s referral program stacks up to 5 times, so 4 referrals makes your $70 plan completely free.

This article was written with AI assistance. All claims, pricing, and feature details have been verified against primary sources.