Securing Your Location: An Expert Guide to Managing Location Services on Mac

As a cyber security expert with over a decade specializing in cloud data security, I‘ve seen firsthand how the proliferation of location tracking has eroded user privacy. Location services are now built into virtually every device and OS, including Apple‘s macOS. While these services offer useful features, they come with real risks that every Mac user should understand and actively mitigate.

How Prevalent is Location Tracking?

The location tracking industry has exploded in recent years. A 2021 report from Flashpoint found that 87.5% of Android apps contain at least one tracker that can collect location data. iOS doesn‘t fare much better, with 79% of apps incorporating location trackers. While Apple is generally more privacy-focused than Google, both allow a staggering level of location surveillance.

This data is immensely valuable for advertising. Location-targeted ad spending is projected to grow to over $36 billion by 2025, over 50% of total mobile ad spend. Tech giants and data brokers have built massive businesses around hoovering up user locations and using them to build eerily accurate profiles.

What Are the Privacy Risks of Enabling Location Services on Mac?

When you enable Location Services on macOS, you‘re allowing your device to determine its precise geographic location using GPS, Wi-Fi, Bluetooth, and crowd-sourced hotspot and cell tower locations. This data is then made available to Apple services and third-party apps that you grant permission.

The privacy implications of this are significant:

• Apps can collect your real-time and historical locations to analyze your behaviors and movements
• Location data is frequently sold to data brokers and ad networks to serve invasive targeted ads
• Bad actors could potentially access your location to stalk, harass, rob, or scam you
• Bugs or hacks could expose your location data to the public or on the Dark Web
• Governments and law enforcement can subpoena your location records for investigations

A 2019 study by the NY Times was able to use a leaked location dataset to easily identify and track specific individuals, including high-profile public figures, based solely on their movements. Protecting access to your location is critical for maintaining any semblance of privacy.

Using Location Services Safely on Your Mac

Despite the risks, Location Services powers genuinely useful features that many rely on daily. Fortunately, by taking a proactive approach to permissions and adopting good privacy habits, you can mitigate the most egregious location-based tracking on macOS.

Audit App Location Access

The first step in protecting your location is auditing which apps have access to it. To do this:

1. Open System Settings and navigate to Privacy & Security > Location Services
2. Click the lock and authenticate to make changes
3. Look through the list of apps and system services to review their location access

You have four options for each app‘s location permission:

In general, it‘s best to default to "Never" and only enable access for apps that truly need it. For those, "While Using the App" is usually sufficient – very few apps should have a good reason to Always access your location in the background.

Pay special attention to any apps set to Always, as these can track you at all times. Audit this list regularly, as some apps may enable location when updating.

Enable Find My for Locating Lost Devices

One of the few cases where giving Apple permanent location access is warranted is for the Find My service. Find My can help you locate, lock, and wipe your Mac if it‘s ever lost or stolen. It uses end-to-end encryption so even Apple cannot access your devices‘ locations.

To set up Find My on your Mac:

1. Open System Settings and navigate to your Apple ID page
2. Select iCloud and enable the "Find My Mac" checkbox
3. Click Options next to Find My Mac
4. Enable "Find My network" to let nearby Apple devices share your Mac‘s location when offline
5. Enable "Send Last Location" to automatically transmit your Mac‘s location when the battery is critically low

You can now locate your Mac using the Find My app on another Apple device or at iCloud.com. If it‘s lost, you can remotely make it play a sound, lock it, or fully erase it. This can help you recover a lost Mac or protect your data if it‘s stolen.

However, Find My is not foolproof. Sophisticated thieves may be able to disable it by turning off your Mac before it can send its location. For maximum protection, I recommend using a firmware password to prevent a thief from restarting into Recovery Mode and disabling Find My that way.

Limit Identity Leaks with VPNs

Another key aspect to protecting your location is preventing your IP address from being used to geolocate you. Every time you connect to the Internet, your IP could be logged and used to roughly determine your real location.

This is especially concerning on public Wi-Fi networks, where the hotspot owner could monitor all your traffic. But even at home, your ISP and every website you visit can see and record your IP address to start building a location history.

The best way to hide your IP address is to use a Virtual Private Network or VPN. A trustworthy VPN service will encrypt your Internet traffic and route it through an intermediary server, replacing your real IP address with a new one from your chosen location.

Based on my professional evaluation, I recommend the following VPNs for Mac users:

• NordVPN – Best overall choice with advanced security features like double VPN hops, Onion over VPN, and malware protection.
• Surfshark – Fully featured VPN with unlimited devices and an introductory price significantly lower than competitors.
• ExpressVPN – Great VPN with a huge server network, excellent speeds, and proven no-logging policy.
• ProtonVPN – Strong focus on privacy and security from a trusted name in encrypted services. Based in Switzerland.

When evaluating VPNs, I prioritize those with large server networks, a choice of VPN protocols, and strict no-logging policies to ensure they can‘t be compelled to turn over records. Avoid "free" VPNs as these often siphon your data to advertisers or limit your speeds and bandwidth.

Use Private Browsing to Avoid Website Location Tracking

Even if you hide your IP address with a VPN, individual websites can still approximate your location using other methods like:

• Geolocation API: With location access enabled, sites can directly request your precise coordinates
• Location info in URLs: URLs may contain location strings like country or language codes
• Wi-Fi positioning: Sites can scan which Wi-Fi networks your device sees to cross-reference against Wi-Fi location databases
• Cell tower triangulation: Mobile browsers may share data about nearby cell towers that can be used to estimate location

To fully hide from these techniques, use your browser‘s Private or Incognito mode when searching for location-sensitive topics or visiting privacy-critical sites. This will prevent the site from accessing most location APIs and will stop your searches from being added to your device‘s history.

Private browsing also clears cookies at the end of each session, preventing sites from building a long-term location history on you. On that note, it‘s a good idea to regularly clear your cookies and site data, even outside of private browsing, to reset your digital trail.

Statistics on Location Tracking

To put the scale of location tracking into perspective, consider these eye-opening data points:

• There are an estimated 75+ million active iPhone users in the US alone, most with location services enabled
• Over 5 billion Apple devices worldwide have Find My location tracking enabled according to Apple
• Google recorded over 112 billion location entries in 2020 to service user and law enforcement requests
• 45% of the top 1,000 iOS apps were found to contain known tracker SDKs for location monitoring
• US carriers sold real-time user locations thousands of times without checks

It‘s clear that location data harvesting is ubiquitous across the tech industry. As long as this data remains valuable for advertising and analytics, companies and governments will continue to pursue ever more sophisticated methods of tracking where we go.

Conclusion

Location Services is a double-edged sword. While it enables immensely useful features, it also subjects users to invasive tracking and erodes their privacy. As a cyber security professional, I believe everyone should proactively limit how and where they share their location data.

On macOS, this means carefully auditing app location permissions, enabling privacy features like Find My, and using tools like VPNs and Private Browsing to hide from both network- and website-based location tracking. Apple provides robust location controls, but it‘s up to each user to meaningfully configure them.

Ultimately, sharing your location should be a choice you make deliberately for specific apps and services, not a default state of total surveillance. By taking back control over your location settings, you can enjoy the benefits of Location Services without completely sacrificing your privacy in the process. Stay safe out there!