Your phone knows where your trucks are.
It knows which neighborhoods you serve. Which supply house you visit. How long you stay at a customer’s address. When your team starts work. When the last job ends.
And someone else may own that data.
Not you. Not your customer. A data broker.
No hacking required. No dramatic breach required. Just an app, a tracker, and a privacy policy most people never read.
This is the next problem small trade businesses need to understand.
What is a data broker?
A data broker is a company that collects information about people and businesses, organizes it, and sells access to that information.
Think of it like a wholesale market for personal and business data.
Apps collect pieces of information. Brokers combine those pieces. Buyers use the finished profiles for advertising, pricing, risk analysis, lending, and competition research.
No single location point tells the whole story.
A long-term route history does.
Your location data can reveal:
- Where your technicians live
- Which neighborhoods generate the most jobs
- How many calls you handle each day
- Which commercial accounts you visit
- When your business is busiest
- Where your vehicles stop between jobs
- How far your service area extends
That’s valuable information.
The journey of your data
The path is usually simple.
1. App
You use an app for scheduling, routing, time tracking, payments, customer management, or team communication.
The app asks for permissions.
Location. Contacts. Device information. Usage data.
You approve access because the app needs some of those features to work.
2. SDK or tracker
The app may contain third-party software called an SDK.
You don’t need to remember the technical name. Think of an SDK as a plug-in installed inside the app.
It may help show ads, measure usage, analyze behavior, or connect the app to another service.
The problem is that some SDKs can collect data in the background.
In August 2026, TechCrunch reported that Android apps may be sharing precise location data with advertisers and data brokers without developers realizing the setting was enabled.
The report cited Electronic Frontier Foundation research. Some advertising SDKs inherit the app’s location permission. Once you approve location access, the tracker may receive it too.
No separate warning. No clear second choice. Just one permission that opens more doors than you expected.
3. Broker
The tracker sends data to a third party.
That third party may combine it with information from other apps, websites, public records, advertising systems, and commercial databases.
Your route becomes a pattern.
Your pattern becomes a profile.
Your profile becomes a product.
4. Buyer
The broker sells access to buyers.
That can include:
- Advertisers targeting businesses or neighborhoods
- Insurers estimating risk or activity
- Lenders evaluating business behavior
- Competitors studying service territories and demand
- Government agencies purchasing location intelligence
No direct relationship with you. No conversation with you. Just a transaction involving information created by your work.
A small business scenario
Let’s say Maya owns a four-person electrical company.
She uses an app for electrician scheduling software, GPS time tracking, dispatching, and invoicing. Her technicians use the app from their phones.
The app works well. Maya approves location access because she wants accurate arrival times and route visibility.
A year later, a competitor launches a new service area.
The competitor starts advertising heavily in the same neighborhoods Maya serves. It also approaches two commercial property managers that Maya visits regularly.
Then Maya notices something else.
The competitor’s new service area mirrors her busiest routes. Its advertising runs during the exact hours when her team is most active.
Maya asks how they know.
She eventually learns that a third-party tracker inside the app was sending location data to an advertising company. That data was combined with other records and made available to commercial buyers.
Maya’s customer list may not have been sold as a spreadsheet.
The result can still be almost as revealing.
Routes, timing, addresses, and visit patterns can expose how a small business operates.
No enterprise analytics team. No complex espionage. Just data leaving an app every day.
Regulators are finally paying attention
The FTC has made it clear that this isn’t a theoretical risk.
In January 2025, the Federal Trade Commission finalized an order against Mobilewalla. The order banned the company from selling sensitive location data and restricted how it could use data collected through online advertising auctions.
The same month, the FTC finalized an order against Gravy Analytics and Venntel. The companies were prohibited from selling, disclosing, or using sensitive location data, except in limited national security or law enforcement situations.
In May 2026, the FTC announced a Kochava settlement and proposed order that would prohibit Kochava and its subsidiary from selling or sharing sensitive location data without affirmative express consent.
That’s meaningful progress.
It also comes late.
Regulatory action can stop future conduct. It can require deletion. It can force better consent practices.
It can’t guarantee that every copy, profile, report, or inference created from old data disappears.
No rewind button. No perfect cleanup. Just a reminder that prevention matters more than recovery.
Privacy labels don’t stop brokers
App store labels help. They don’t solve the problem.
Google Play’s Data safety section asks developers to disclose what data their apps collect and share.
Apple’s App Privacy labels show whether data is linked to you or used to track you.
Those labels are summaries.
They don’t create a wall around your data. They don’t stop a tracker from sending information to a service provider. They don’t tell you every buyer who may eventually receive an aggregated profile.
They also depend heavily on developer disclosures.
That’s important because developers may not understand everything an embedded SDK does. The August TechCrunch report showed exactly how that gap can happen.
No label means “your data stays inside the app.”
No label means “nobody else can use it.”
Just a disclosure that may be difficult to interpret and even harder to verify.
Our commitment to data sovereignty
We believe your business data should serve your business.
Not advertisers. Not data brokers. Not competitors.
Valortek is building tools for small trade businesses that need practical control over their operations. Our Operations app helps locksmiths, plumbers, HVAC companies, electricians, and appliance repair businesses manage schedules, jobs, routes, invoices, payments, and teams.
We don’t sell, rent, or trade personal information to third parties for their marketing purposes. Our privacy policy explains what we collect, why we collect it, and when information may be shared with service providers.
Our security practices include encryption in transit and at rest, access controls, authentication requirements, regular security updates, and secure cloud storage.
The Operations app also supports offline work. Your team can continue handling jobs when service drops, then sync when the connection returns.
Our Finance app extends that control to payroll, bill payments, tax planning, cash flow forecasting, advisor access, and budget tracking.
No data marketplace. No hidden resale model. Just software built around your company’s work.
That’s what we mean by data sovereignty.
Cut your business out of the broker economy
You can take action today.
✅ Audit app permissions
Review location, contacts, photos, microphone, and background activity permissions.
Turn off anything the app doesn’t truly need.
✅ Check every app your team uses
Look beyond your main field service management software.
Review route apps, time clocks, payment apps, messaging tools, mileage trackers, and free utility apps.
Free often means your data is part of the business model.
✅ Ask direct questions
Ask each software provider:
- Do you sell or rent customer data?
- Do you share precise location data?
- Which third-party SDKs or trackers are installed?
- Can I disable analytics and advertising collection?
- Where is my business data stored?
- What happens to my data when I cancel?
- Can I export and delete my data?
Vague answers are useful answers.
They tell you to keep looking.
✅ Limit precise location access
If an app only needs location during a job, don’t give it permanent background access.
Use the narrowest permission that supports the feature.
✅ Avoid unnecessary advertising SDKs
If you’re choosing an app, ask whether it includes advertising trackers.
A professional business tool shouldn’t need to monetize your route history.
✅ Read the privacy policy’s sharing section
Skip straight to “Information Sharing and Disclosure.”
Look for words like:
- Advertising
- Data partners
- Affiliates
- Analytics
- Marketing purposes
- Location intelligence
- Business transfers
You don’t need to be a lawyer.
You need to know who gets your information.
✅ Choose software with clear ownership rules
The best software for plumbers, electricians, HVAC contractors, locksmiths, and appliance repair companies should make data handling easy to understand.
No confusing maze. No “it depends” answer.
When comparing a Housecall Pro alternative, ask what happens to your data after the trial, after cancellation, and after an employee leaves.
When comparing a QuickBooks alternative for contractors, ask whether financial records are used for anything beyond providing the service.
Good field service scheduling software should help you run your company without turning your company into a product.
That applies to HVAC scheduling software. Electrician scheduling software. Appliance repair scheduling software. Locksmith business software. Invoicing software for contractors.
Your routes are not advertising inventory.
Your customer history is not a broker’s product.
Your financial records are not a lender’s shortcut.
Take control of the data your business creates
Your phone knows where your trucks are.
That doesn’t mean the rest of the data economy should know too.
No hidden buyers. No unclear permissions. Just software and policies that respect the work you’ve built.
We’re a small team building for small businesses. We think your data should stay connected to your company.
For questions about Valortek’s data practices, contact us at info@valortek.us.
Questions? Contact us – we're happy to help you decide.
