You Are Being Tracked All The Time. Even Offline.

Most conversations about digital privacy focus on what happens when you are online — which websites you visit, which apps you use, which emails you open. The assumption, rarely stated but widely held, is that when you close the laptop and walk out the door, the tracking stops.

It does not. The infrastructure for monitoring your physical movements, your purchasing behavior, your social interactions, and your daily routines has been built into the world around you — and most of it operates whether you are connected to the internet or not.

Offline tracking is not a marginal concern or a future risk. It is current reality, operating at scale, largely without public awareness, and in many jurisdictions without meaningful legal constraint. Understanding where it happens and how it works is the starting point for making informed decisions about your physical privacy — a concept most people have never considered necessary.

Automated license plate readers — cameras that capture, photograph, and record the license plate of every vehicle that passes — have become one of the most pervasive surveillance technologies in use today. More than 5,000 law enforcement departments across the United States use systems from Flock Safety alone, a company that has built what amounts to a vast, interconnected movement database covering significant portions of the country.

These cameras operate continuously. They do not target suspects. They photograph every vehicle — yours included — every time you drive past one. The data captured includes your license plate number, the precise GPS location of the camera, the date and time of capture, and a photograph of the vehicle. This information is stored, searchable, and in many cases shared across jurisdictions and with private entities.

The technology has advanced beyond simple plate recognition. Modern systems can detect vehicle make, model, and color. Some flag specific bumper stickers or rideshare logos. AI integration allows pattern analysis across millions of captures — identifying recurring movements, mapping routines, flagging anomalies. Flock cameras data is also sold to third parties including commercial companies, creating a private market for your physical movement history that exists entirely independent of your online activity.

In 2025, Johnson City, Tennessee signed a ten-year, eight million dollar contract with Flock Safety. Richmond, Virginia paid over one million dollars to the company in a fourteen-month period. The infrastructure is being built rapidly and with long contractual commitments — which means it is not going away.

Your Face Is Being Recognized

CCTV cameras have been a fixture of public spaces for decades. What has changed is what happens to the footage they capture. Facial recognition technology — once confined to high-security government applications — has been integrated into commercial camera systems, retail environments, sports venues, transport hubs, and increasingly, residential neighborhoods.

In the United Kingdom, one of the most heavily surveilled countries in the world, there are estimated to be between four and six million CCTV cameras in operation. London alone has more cameras per capita than almost any other city on Earth. Many of these systems are now connected to facial recognition databases that can identify individuals in real time as they walk through public spaces.

In the United States, the absence of federal regulation has allowed facial recognition to be deployed widely and with minimal oversight. Retailers use it to identify known shoplifters. Casinos use it to flag banned patrons. Police departments use it to identify suspects from surveillance footage. Private companies collect and process the footage without the knowledge or consent of the people it captures.

Your face, as we covered in an earlier post, is a searchable identifier. Every time you walk past a camera connected to a facial recognition system, you may be identified, logged, and added to a record of your physical movements — without ever interacting with any digital device.

Loyalty cards and rewards programs are one of the most effective data collection mechanisms ever deployed — precisely because people sign up for them willingly in exchange for discounts that often cost the retailer less than the data is worth.

Every transaction made with a loyalty card creates a permanent, timestamped, location-stamped record of what you bought, where, and when. Across months and years, this data reveals your dietary habits, your health concerns, your financial situation, your household composition, your recreational activities, and your daily routines. This data is not held only by the retailer. It is sold to data brokers, shared with analytics firms, and used to build consumer profiles that feed into the broader data ecosystem.

Cash transactions leave no record. Every card transaction — loyalty or otherwise — does. The choice of payment method is, in a very real sense, a privacy decision.

Your smartphone is a tracking device that also makes calls. Even with location services disabled, your phone continues to transmit information that reveals your whereabouts through several mechanisms that most people are unaware of.

Cell tower triangulation. Your phone must connect to the nearest cell tower to make and receive calls and messages. Mobile networks log which towers your device connects to and when — creating a continuous record of your approximate location that your carrier holds and in many jurisdictions can be compelled to provide to law enforcement or sold to third parties.

Wi-Fi probe requests. Even when you are not connected to a Wi-Fi network, your phone continuously broadcasts probe requests — signals searching for known networks. Retail environments, shopping centers, and public spaces use sensors that capture these probe requests to track how long visitors spend in particular areas, their movement patterns through the space, and return visit frequency. This happens without any interaction from you.

Ultrasonic tracking. Some retail environments and media companies embed ultrasonic audio signals — inaudible to humans — in their environments and broadcast content. Apps with microphone access can detect these signals and report back to the sender, linking your physical location to your digital identity without using GPS.

You cannot opt out of a world that has surveillance infrastructure built into its physical fabric. But you can make deliberate choices that reduce how much of your movements and behavior are captured and retained.

Turn off Wi-Fi and Bluetooth when not in use. This eliminates probe request tracking and Bluetooth signal capture. Both can be toggled off in your phone’s quick settings panel in seconds and re-enabled when needed.

Reconsider loyalty programs. Evaluate each loyalty program you participate in against what it actually delivers. The marginal discount at a supermarket is rarely worth a complete purchase history. Consider paying cash for sensitive purchases — health products, medications, items that reveal conditions you would not want on a commercial profile.

Be aware of camera coverage. This is not about avoiding legitimate spaces or behaving differently in public. It is about understanding that public spaces are comprehensively monitored and that your movements through them are recorded. Awareness is the foundation of informed decision-making.

Review app permissions for microphone access. Apps with microphone access on your phone are potential vectors for ultrasonic tracking. Audit which apps have microphone permission and revoke it for any that do not genuinely need it for core functionality.

Use a faraday bag for high-sensitivity situations. A faraday bag — an inexpensive pouch that blocks all wireless signals — prevents your phone from transmitting any signals at all when placed inside it. This is not everyday practice for most people, but it is a meaningful tool for anyone who requires genuine physical privacy in specific situations.

You are not paranoid for thinking about this. You are informed. And in a world where the default is comprehensive monitoring, being informed is the only meaningful form of protection available.