Data Ethics, Privacy and Humans · worked example
A personal harm analysis of Life360's privacy agreement — not a summary of what it says, but a reading of where the flows it authorizes could work against the people on the other end: you, and the family whose real-time location you handed over to keep them safe.
Life360 is, on its face, a family-safety map. You open the relationship expecting one thing: everyone in your Circle can see where everyone else is, so no one worries. The policy authorizes a great deal more than that. The crown-jewel data here is not a listening history or a shopping cart — it is the continuous, precise, real-time location of you and your children, plus how you drive. That is among the most sensitive data any consumer app collects, and the policy permits it to travel well beyond the family map. Below are the specific places where the flows it allows could cause harm, each tagged with the lifecycle stage the risk lives in and how serious it is.
Before the harms, the raw material. Life360 collects your identity and account (“username, email address, real name, nicknames, date of birth, mobile/watch phone number… shipping and billing addresses”), the same for everyone you add to a Circle, and — the reason the app exists — precise location and movement:
“With your consent, we collect precise geolocation data (including GPS coordinates, latitude/longitude information, and motion sensor information) through your mobile/watch device or our Products.”Section I.B, Information We Collect Automatically
It also collects driving event data (“your speed… whether you are speeding up or slowing down,” from the device gyroscope, accelerometer and GPS), behavioral tracking down to “mouse movements and keystrokes,” optional sensitive data (“medications, allergies, and medical conditions… race, ethnicity”) if you fill in emergency profiles, and it may run facial recognition against a government ID or selfie for age/parental verification. It then derives inferences: “we may predict… based on… your typical movement patterns.”
What the policy allows: Life360 collects precise, real-time GPS for every member — including children — and by its own design the app only works if location stays on. It also keeps collecting even in the background, and it derives your “typical movement patterns” (Section I.E).
Why it could harm you: a live, minute-by-minute map of where your kids sleep, go to school, and spend their afternoons is the single most abusable dataset in a consumer app. It is a standing target for a breach, a stalker, an abusive ex with account access, or anyone who can compel or buy it. The convenience — knowing everyone got home — is inseparable from creating that map in the first place.
What the policy allows: beyond advertising, Life360 hands your location to “business partners for their own use.” Its own state-law disclosures say so plainly:
“we license certain information, including precise geolocation data (which is ‘sensitive’ personal data under certain State Privacy Laws) to select business partners for their own advertising and monetization purposes.”Section VIII.A, Sales, Sharing, and Targeted Advertising Activities
Why it could harm you: the Texas notice is even blunter — “We may sell your sensitive personal data.” This is the flow Life360 was publicly caught doing: precise location, “de-identified” with a device ad-ID and lat/long, sold onward, where it can be re-identified and traded. It runs until you opt out (see actions). The single highest-value thing you can do is below.
What the policy allows: Life360 collects “Driving Event Information” — speed, acceleration, deceleration, heading — and discloses it, along with precise location, to business partners providing “Driving analytics services” (Section IV.D). Those partners use it, in the policy's own framing, to “derive insights and analytics.”
Why it could harm you: a driving-risk score built from your everyday trips is exactly the input auto insurers buy to set — or raise — premiums, often without your realizing a family-safety app was the source. You can be judged and priced on driving data you never knew was being graded.
What the policy allows:
“Life360 provides certain business partners the right to commercialize aggregated and de-identified data to, for example, help insurers or municipal authorities understand and predict driving behavior at scale, and/or to help retailers make decisions on where to open new locations.”Section IV.E, Business Partners for Their Own Use
Why it could harm you: “aggregated and de-identified” sounds harmless, but location traces are notoriously easy to re-identify, and the practice turns where your household actually goes into a commercial input for other companies' decisions. You are opted in by default; the off switch is buried under “Traffic & Retail Insights.”
What the policy allows: the opt-outs cover disclosure to advertising and business partners — but Life360 states it “will continue to collect your device location and movement data and to share such data with your Circles and with third parties as needed to support” the service. Worse, deleting your account may not end collection from a Tile or Pet GPS: its location “may still be collected anonymously from other Tile and/or Life360 Community members” nearby (Section V.A).
Why it could harm you: the controls limit the sale, not the surveillance. The core location firehose keeps running, and a physical tracker can keep phoning home after you thought you left. Opting out feels like leaving; it isn't.
What the policy allows: the “Swircles” loyalty program lets you earn points “by taking certain actions in the Life360 app, including sharing your location, having your driving behavior tracked… opting in to marketing.” The policy concedes “this Program is a financial incentive under the California Consumer Privacy Act,” values your data at “between $10 and $16.99,” and notes “You are automatically enrolled… no separate sign-up is required.”
Why it could harm you: this is pay-for-privacy: it puts a price on giving up tracking and defaults you into it. It nudges the whole household — kids included — to treat continuous location and driving surveillance as a normal thing you're rewarded for, and quietly discounts the value of walking away.
What the policy allows: retention has no fixed limit — data is kept “for as long as you use our Products or Services or as otherwise necessary” (Section VII.E). And it can be handed out:
“We may disclose personal information to third parties (including but not limited to, law enforcement, other government entities, or civil litigants) when required to do so by law or subpoena, or if we determine (in our sole discretion) that disclosure is necessary.”Section IV.G, Law Enforcement, Regulators, and Other Parties
Why it could harm you: an ever-growing location history, held indefinitely, is a record that can be pulled into a divorce, a custody fight, a civil suit, or a government request — including “civil litigants,” i.e. the other side in a lawsuit. Location data that exists can be compelled; location that was never retained cannot.
What the policy allows:
“all information collected via or by Life360 may be transferred, processed, and stored anywhere in the world… Your information may be accessible to law enforcement or other authorities pursuant to a lawful request.”Section VIII.B, International Transfer
Why it could harm you: your family's location can land in jurisdictions with weaker protection and broader government-access powers than where you live — the policy admits this may be “less protective” than your home jurisdiction. Where the data physically sits changes who can reach it, and the safeguards named (contractual clauses, the Data Privacy Framework) are real but partial.
Where the risks concentrate, named in the field's own vocabulary:
Unlike a media app, the heat here starts at collection — the data itself is uniquely sensitive — and peaks again at disclosure, where that live location is licensed, aggregated, and compelled outward. There is no benign end of this pipeline.
The test
Context you entered: a family-safety relationship — you and the people you love can see each other's location so no one has to worry.
Expected flow: your precise location goes to your Circle, and to emergency services if something goes wrong.
Boundaries crossed: that same precise location is licensed to business partners for their own monetization (#02); your driving is scored and routed toward insurers (#03); your movements are aggregated and sold to cities and retailers (#04); the record is kept indefinitely and reachable by subpoena and civil litigants (#07); it can be stored and accessed anywhere in the world (#08); and you're auto-enrolled in a program that rewards you for keeping all of it on (#06).
None of these are what “let my family see where I am” implies. That gap — between the flow you expected and the flows the policy authorizes — is where the harm lives, and here the data at stake is far more sensitive than in an ordinary app.
Consequences
A cheaper or free family-safety app, paid for by licensing precise location for others' profit — against stalking, re-identification, insurance and price effects, and breach exposure. The benefit is felt now by the parent; the harm is borne diffusely, and disproportionately by the children who never chose it.
Duty & rights
Consenting to “keep my family safe” is not consenting to have that family's location sold for a partner's monetization. Treating the sale as opt-out — and defaulting people in — treats a right over uniquely sensitive data as something you must claw back rather than something you grant.
Virtue
What does a safety company become when the safety data is also the revenue stream? Monetizing the very location people trusted it to protect corrodes the relationship it sells, and normalizes turning intimacy into inventory.
Justice
The burden falls hardest on those who never find the toggle — the rushed parent, the less technical, and above all the tracked child with no say. Power is deeply asymmetric: Life360 and its partners see and price the movements; the family cannot see who holds them.
The policy grants real controls. In rough order of value:
Bottom line
Life360's policy is not the ordinary ad-tech bargain — it is that bargain applied to the most sensitive data a family has: the continuous, precise, real-time location of parents and children, plus how they drive. The company's own words concede it may “sell your sensitive personal data,” license precise location to partners for their monetization, and score your driving for insurers. The harm isn't hidden in fine print about a music profile; it's the defaults on a safety app — sold, aggregated, retained, and rewarded — that you have to actively switch off.