Cell location data sold through commercial brokers was enough to identify a senior official at the US Conference of Catholic Bishops and link his movements to the LGBTQ dating app Grindr. A publication obtained the data, shared it with the Conference, and the official resigned. The data was supposed to be anonymized. It was not.
What actually happened
A publication bought cell location data tied to the general secretary of the US Conference of Catholic Bishops. The data appeared to show when and where he used Grindr. The publication shared it with the Conference, and he resigned. The data broker industry had created the pipeline; the publication simply followed it upstream.
Why "anonymized" is doing a lot of work
Data brokers sell location data stripped of obvious identifiers. Researchers have demonstrated for years that a few location points are enough to identify a specific person. If you know roughly where someone lives and works, a handful of pings can pin them down. What is new here is not the re-identification risk—it is that a news organization bought commercially available data to identify and expose a specific individual.
The wider pattern
The data broker industry has faced criticism for years. Companies have been caught selling data to law enforcement and state agencies. Norway fined Grindr for sharing user data with brokers. Carriers and ad-tech firms sit along the chain. The priest's case illustrates how commercially available data can be weaponized against someone and how difficult it is for ordinary users to know who holds their information.
Our analysis
The Grindr fine in Norway showed regulators can act. The US still has no federal privacy law with teeth, so the same patterns continue. What makes this case notable is the downstream use—a news outlet as the de-anonymizer—rather than law enforcement or a private investigator. This raises a separate question: does press access to the same data change the ethics? Advocates would argue it does not; the violation occurs at the point of sale. Editors and publishers may disagree about where that line sits. The harder truth is that no user agreement or permission screen prevents any of this. The broker sits between the user and the sale, and the user never agreed to either.
Who should care
Dating app users**: Location is core to these apps' function, which means it is also core to their data feed. Reducing precise location permissions helps, but the broker pipeline runs deeper than app settings.
Privacy advocates**: The priest's case is extreme but not anomalous. It demonstrates what re-identification looks like in practice and why "anonymized" remains a marketing term.
Publishers and journalists**: The story places newsrooms on the same data-purchasing footing as intelligence firms. This deserves an internal conversation about sourcing norms.
Policymakers**: Without a federal consent and minimization framework, every incident like this will follow the same arc. Carriers sit closest to the source, and enforcement will likely target them next.
What to watch next
Watch whether US federal privacy legislation gains traction. Without a law that places obligations on the broker side, each new story will play out identically. Also watch carrier-level data sales. Carriers sit upstream of apps, and that is where the next round of enforcement pressure is building.
Key takeaways
- Broker-sold cell location data allegedly identified a USCCB official and linked him to Grindr visits.
- A publication obtained and shared the data, leading to his resignation.
- "Anonymized" location data has been repeatedly shown to be re-identifiable with minimal additional information.
- Norway fined Grindr for sharing user data with brokers; the US has no comparable federal law.
Frequently asked questions
How was the priest identified through Grindr data?
A publication purchased broker-sold location data that appeared to show his visits to the app. Combined with his known position and schedule, the data built a profile that identified him.
Is location data really anonymous?
No. Researchers have shown that a small number of location points can re-identify individuals when combined with basic background knowledge.
Can I stop apps from selling my location?
You can limit precise location, restrict ad tracking, and audit permissions, but the broker trade operates upstream of any single user action.
Has any country acted on this?
Yes. Norway fined Grindr for sharing user data with brokers. The US has no comparable federal privacy law.
Does this affect people outside the US or who do not use Grindr?
The broker industry is global. Any phone with location services enabled produces data that flows through similar commercial channels, regardless of the user's location or the apps installed.