Hi,<p>I've been meaning to write this for a few years now.
I saw https://news.ycombinator.com/item?id=34032484 and lots of great replies there - but I happen to have an insight which I kept track of for years now.<p>Some background first. Since more than a decade I've been using an always-on VPN on all my devices through a VPS I operate (various cloud providers along the years).
Also for context, I stopped using all google services around 2015 or thereabouts - although I still have an account I no longer use it.
The only google service that I use rarely is google maps - of course, never logged on.
And a few times a month I use google search for the odd obscure thing.<p>Around 2016 was the first time I noticed that google.com was showing at the bottom of the page my ZIP code. It felt very unusual but I was in the process of moving so I didn't pay too much attention. To my surprise, a few weeks later google.com was showing my new ZIP code.<p>I shopped around for cloud providers that would allow me to rotate the instance IP easily and thankfully there are many but I was curious how come google picked it up - the only plausible reason was using location data from the Google Maps iOS app.<p>Here's how you can replicate this.<p>Get a cheap VPS from a country different than yours. Get an iOS device (ideally an (older?) iPhone but I think it should work on an iPad) - Android devices should be excluded from this test for obvious reasons.
Reset it to factory defaults (optional but removes moving parts and false leads like cookies etc).<p>Install wireguard (or your preferred always-on vpn) and configure the VPS to be used as an exit node.
Install google maps (don't login of course) - can be used without being logged on just fine.
Install firefox focus (Safari in Private Window mode would work as well).<p>Confirm via ipinfo (or your preferred whatsmyip website) that you're using the VPS IP
Go to google.com and confirm it's showing at the bottom of the page the country of the VPS (could also be shown in a different language if google has a presence in that country).<p>Use the google maps app a few times a day (ideally navigate from a place to another) - it will take about 2-3 weeks but you'll notice that google.com will now show your actual country for the VPS IP and also the google.com language will change to your own.<p>If you want to take it one step further, continue to use google maps on the iOS device. You'll notice that after a few more weeks, google.com will show your actual City (based on the IP) - and after a while longer it will be even more precise, will show your ZIP code.<p>You have to be patient though, it will take 2-4 weeks to start with - and it's imperative that that IP address is dedicated to this test.<p>Funny enough, I was on holiday on Mexico for a month right before reading the HN article I mentioned (have been using a VPS in the states for lower latency) and I noticed that after 2 weeks the language changed to Spanish and google.com was showing Mexico (I rotated the IP when this happened and it prompted me to write this 'Tell HN'.<p>Not surprisingly but Google doesn't share the new GeoIP data - MaxMind, ipinfo and others never changed their location data for that IP - they showed the original geoip even a few weeks after google changed theirs - haven't checked longer than that - it could be shared eventually.<p>In conclusion - I can't say that I'm surprised Google is using the Maps location data - and I don't think there's any way to prevent it (outside of not running Maps - but unfortunately it's one of the few ways of checking restaurant reviews).
My "workaround" is to periodically rotate my VPS IP and move on with life :)<p>Thanks for reading - I hope you found this useful.
> Apple provides all developers with access to its Network.framework, Multipath TCP (MPTCP), and other networking APIs, which by design allow any app developer to bypass the Wi-Fi interface and route traffic directly over the cellular interface. Invoking these tools effectively allows any app developer to unmask VPN users on Wi-Fi without notice or consent. By routing device traffic over the cellular interface, app developers are able to bypass VPN protection and obtain the user's cellular IP and other device information that allows that app developer to fingerprint a particular device and/or user.<p><a href="https://blog.disconnect.me/ios-vpn-leak-advisory/" rel="nofollow">https://blog.disconnect.me/ios-vpn-leak-advisory/</a>
Summarizing: If you run the Google Maps app on your iOS device, Google will build a correlation between your IP address and your GPS+ location.<p>You can turn off Location Services access for Google apps, if you feel the need to run them at all. Adding a few seconds of panning and zooming is a reasonable trade.<p>> (Google Maps app is) one of the few ways of checking restaurant reviews<p>Apple Maps has restaurant reviews also, if you can stomach Yelp. Google Maps also works in mobile Safari, if you'd prefer to sandbox Google code from your hardware (and again, you do not need to allow access to your location).<p>There is no path forward that permits both "I don't accept Google's data practices" and "I allow Location Services for Google mobile apps on my iOS device". :)
I work for IPinfo, but this is my personal opinion/account.<p>Whenever I see people talking about their IP geolocation being wrong, I will reach out to them and try to fix that issue. Even if it is just one person, it really means a lot to them and to us as well.<p>For some IP geolocation correction, some providers are better than others, but with Google? oof, tough break.<p>It is really weird to see that the best possible chance of fixing your IP address with Google is to get a bunch of android smartphones and start running Google Maps with GPS on. Yes, that is even suggested to organizations with their own ASN (which represents a big IP address block) who are struggling with wrong IP geolocation assignment by Google. I have yet to come across any post about how people were able to contact Google, and they fixed their IP geolocation issues.
GeoIP is a product from Maxmind, the post does not actually implicate Maxmind at all.<p>Perhaps a better title is "Google Maps location data is used to localise other Google services"
I have a wiregaurd VPN in my home server in London. During the pandemic I was stuck in the Middle East for a few months. Obviously while there I was VPN-ing all my traffic from my various devices through my home server. When I got back to London, all my YouTube and TV ads were as if I was still in the middle east. Very annoying.
This is why for anonymity you want to use a commercial VPN provider rather than a self-hosted-VPN-on-VPS solution. In the former, you connect to a pool of servers that shares IP addresses with thousands of users, but in the latter you connect to a single server that's only associated with you.
Takeaway: don't use Google if you care about privacy. Your VPN/browser config likely cannot outrun their algorithms.<p>I'm neutral about this - making GeoIP data better improves everybody's life, so I find it hard to be annoyed about it.
I encountered something similar to this last month. I was visiting Canada from Spain, and got an esim from <a href="https://www.airalo.com/" rel="nofollow">https://www.airalo.com/</a>. Due to what I guess is airalo obtaining transit from the cheapest provider, the data connection ended up being bounced through Czechia.<p>This meant that my android phone was a bit confused at times. When on mobile data the weather widget would default to showing me weather for random Czech cities, and search results would be Czech-localised. When on wifi connections, results were in English and Canada-localised, unless I bounced through a VPN exit node at home.<p>After 3-4 days, ads on Youtube started becoming Canada or Czechia-localised depending on if I was watching it via wifi or mobile data. It seems that google eventually decided that I was in Canada, continuing to play me Canadian ads even when I got home to Spain, on both wifi and mobile data. What was even stranger is that my partner started getting Canadian ads on youtube on her ipad too, which doesn't have any details about my google account (other than us living on the same internet connection). It took about 2 weeks for google to start playing us Spanish ads again.
Lol folks werent even reading my thread properly, all, before throwing out the most obvious, invalidated assumptions. All of the top replies implying I dont know what im talking about.<p>Sorry folks, devices that ive never, ever signed into, that have never left Seattle, now think theyre in fking Mexico anytime i use a google service. Again, not logged in, but also on browsers that clear everything on exit. The ONLY POSSIBLE EXPLANATION, PERIOD, is that Google took my location data from maps in Mexico and tainted my Seatte IP with it (as i was using my seattle-apt-server as my vpn tailscale exit node)<p>And to elaborate, the ONLY app on my phone with access to my location is Google Maps.<p>OP, I 100% believe you, sorry for the comments that clearly just tapped something out without thinking it through.<p>The computer this screenshot was taken from has never left Seattle. It's a naive Windows machine, no VPN, no nothing, and yet... this: <a href="https://i.imgur.com/kVgz1RD.png" rel="nofollow">https://i.imgur.com/kVgz1RD.png</a>
As a counterexample, I always have location turned on in Android and use maps for directions from my house. The location at the bottom of a Google search is a different city from where I live. It has never shown the actual city where I live despite it being easily available as my address is saved as home in Google maps.
I haven't experienced that, I get random locations that are no where close to my real location in incognito google searches. I have Google Maps on android as well.<p>My IPv6 address (/128) changes get changed by the OS every time wifi gets disconnected and prefix (/64) get changed every week or when the router restarts.
I noticed this just recently — DuckDuckGo failed me and then I fell back to google eventually and noticed that the footer showed the village we live in (tiny) which really shocked me/creeped me out. We're not even on a static IP anymore but a dynamic IP...
Noteworthy is that Android by default has an option to 'enhance location accuracy' and it says it sends data back to Google. I consider myself fairly savvy about taming an Android phone but unfortunately this is not one I was aware of. I disabled that on my partner's phone, which is where I suspect the leak came from (they also use Google Maps occasionally; I suspected that probably feeds the information in as well).<p>Since avoiding using these things, IP location seems to be inaccurate as it should be again.
Of course they do, was there ever any doubt?<p>Next important step: How can this be used for something entertaining? Does google maps work with forged location data? That would allow to seed the system with an IP that lives in area 51, or something like that.
Is this definitely based on GeoIP, or could it possibly be that when you look at the same city on Google Maps every day, it decides that you are likely to want to look at that city? Does the behaviour persist in a private browsing window?
See my comment on the previous thread, I have an unusual Google geolocation situation, where at work there is no GPS coverage and Google shows my location in random locations as much as 200 miles away from my actual location. I do not believe that my actual IP makes a difference because I have a Wireguard VPN from my phone through my home router, and enabling that (or leaving it on) does not change the location that Maps thinks I am at. But this is on Android so there may be some difference.
I don’t doubt that this is happening for some people, but it hasn’t happened to me. I have a similar set up. All my devices always use an Algo VPN with an IP address in the US, which I’ve never changed. I use Google Maps on an iPhone with location services enabled. I’ve been in Mexico for most of the past three years, and yet Google has never considered my VPN IP address as being located in Mexico. Google’s websites always show me as being in the US.
You say that the VPN is always on, but wasn't there a post on HN some time ago that showed that on iOS VPN is not 100% used for all data? Might have been this one: <a href="https://www.michaelhorowitz.com/VPNs.on.iOS.are.scam.php" rel="nofollow">https://www.michaelhorowitz.com/VPNs.on.iOS.are.scam.php</a><p>So potentially your real IP was leaked otherwise, Google became aware of that IP and geolocated you, without Maps data?
It should not be surprising that, after voluntarily providing your location data to an advertising surveillance company during the use of free services (using Google Maps) that that advertising surveillance company later monetizes that location data.<p>Stop giving Google your location if you don't want Google to know your location.
Thats why you should use maps in offline mode, if you need to search something online, use the browser.<p>However i doubt you will be able to cut maps internet access on iOS, as usual its "too advanced" for ios, why would you ever do such a thing /s.
Google for many years thought my office in Sweden was in fact in central Tokyo. This happened after a vacation trip there. And then it somehow got stuck with the idea.