The Bureau of Alcohol, Tobacco, Firearms and Explosives has pulled the plug on its pilot contract for Webloc, a commercial phone tracking product, after a wave of legal and privacy alarms from lawmakers, a judge and a prosecutor. ATF officials say the tool ultimately “did not meet our needs” and that the agency is now reviewing other vendor agreements, ending a short but very public spotlight on how ad tech location feeds are slipping into criminal investigations.
According to The Associated Press, ATF described the Webloc purchase as a limited pilot and told reporters it is not currently using any other ad tech sourced services. The AP reports that the cancellation followed pointed congressional questions after ATF Director Robert Cekada acknowledged the agency had bought commercial geolocation data, a revelation that privacy advocates and lawmakers said ran headfirst into Fourth Amendment concerns.
What Webloc Does
Researchers at Citizen Lab concluded that Webloc was originally developed by Cobwebs Technologies and later sold by Penlink. Their analysis says the system hoovers up location signals from ordinary consumer apps and advertising networks, then stitches them together to reconstruct device movement histories that can reach back years. The report claims Webloc can tap records tied to hundreds of millions of devices. Privacy experts warn that ad tech location trails like these can generate intimate movement profiles without the traditional carrier subpoenas or court approved warrants.
Lawmakers Forced A Review
Sen. Ron Wyden’s office and Rep. Michael Cloud say their oversight pushed ATF to shut down the Webloc pilot. Wyden’s release states that the agency ran 341 queries during the test period, including 222 searches tied to active ATF case numbers. He called the cancellation “a victory for Americans’ constitutional rights,” and both lawmakers urged Congress to close the legal loophole that lets agencies buy precise location data instead of getting a judge to sign off. Those disclosures came on the heels of public questioning of ATF leadership in May.
Where It Blew Up In Court
In at least one arson investigation, a prosecutor and a judge reportedly voiced “serious discomfort” with evidence that traced back to Webloc’s ad tech data, according to CyberScoop. Investigators in that case ultimately backed up and secured a traditional court order for bulk cell tower records instead. The episode highlighted how unsettled the law still is around commercial location feeds and the reach of the Fourth Amendment.
Courts have been wrestling with whether large scale location datasets should be treated like carrier historical records ever since the Supreme Court decision in Carpenter v. United States, which requires warrants for certain historical location information.
It's Not Just ATF
Reporting and research have identified other U.S. government customers for Webloc and similar ad tech location tools, including Immigration and Customs Enforcement and some military and local law enforcement units. Critics say those purchases have continued despite the newfound scrutiny, according to The Associated Press. A bipartisan group of lawmakers has floated bills that would ban warrantless purchases of precise location data, and privacy advocates argue that clear legislation is the only real fix. For now, some agencies are shifting back toward court orders while the oversight fights and legal debates grind on.
What Comes Next
ATF says it will keep reviewing its other vendor agreements, while the company now marketing Webloc prominently advertises its work with law enforcement customers on its website. Penlink presents its products as tools that help support lawful investigations and compliance requirements.
Local outlets including FOX 5 Atlanta have been tracking the fallout as lawmakers and civil liberties advocates press for clearer limits on ad tech surveillance. For now, the canceled contract leaves a bigger unresolved question hanging over federal and local investigators: how far they can lean on commercial location data in the name of public safety without trampling on privacy and constitutional protections.
