3

It's generally difficult, if not impossible, to know how any given company is going to use the information they gather about you. In some cases, it's also night-impossible to opt-out of their data collection (because, for all practical purposes, you can't just not subscribe to the service) and certainly beyond your ability to control what they do with that data.

I'm primarily concerned with location anonymity. VPN services like TOR and others allow you to generally hide your physical location from remote servers across the internet. But the VPN tunnel still goes through your ISP, and so it's conceivable that they might be able to track your location regardless of what special software you're using. They may then share this data, or otherwise use it, in ways you might not find appropriate.

Can your ISP indeed know your physical location at any given time? If so, how? Are there ways to prevent this?

7
  • 4
    This is quite unclear - are you talking about the region of the ISP, or the specific geolocation of an ISP user? Also, if you pay your ISP, presumably they have your address as part of the billing information?
    – Matthew
    Feb 18, 2016 at 12:17
  • I agree with Matthew, it's a bit unclear. If you mean that some websites can tell in what city/country you are in, you can't change that. There are several "Geo IP" databases, that link IP addresses (or blocks of addresses) to certain locations. You have no control over these kind of lists.
    – Oldskool
    Feb 18, 2016 at 12:29
  • 5
    How an ISP can know your location? They have a cable that runs to your house. For mobile, because you can be triangulated between masts.
    – symcbean
    Feb 18, 2016 at 12:34
  • Thanks all. What I mean here that I would to know if the ISP can make sure what is your physical location. The billing location doesn't have to be your physical location. In addition you might use your router so the actual location doesn't have to be your actual location and if you use mobile modem as well. In addition if there are many users per same ip like companies is there a way that the isp won't know where each user location is?
    – Avi
    Feb 18, 2016 at 12:47
  • If you're using hardware provided by your ISP (for example a cable moden) and plug this in at another address then you'll likely be identified by MAC address
    – kalina
    Feb 18, 2016 at 12:49

2 Answers 2

8

With few exceptions, your ISP most certainly can - and in all likelihood probably does - know your physical location at any given time. This stems from two general facts:

  1. They are providing a service that you signed up for. During the subscription process, you most likely already gave them your location for installation and/or billing purposes.
  2. They most likely own the infrastructure devices that are directly connected to your device, or the gateway device you're connecting to.

Essentially, the only relatively convenient, usually legal, and reasonably inexpensive way to avoid location tracking by your ISP is to not use your ISP. This means hooking up to the Internet at a friend's house, or some other location that provides free or guest network access. Unfortunately, that also means never using the Internet from home or on your cell phone.


Breaking this down into a bit more detail, you'll see how it's quite clear that your ISP not only can but most often must be capable of knowing your physical location. There are a few ways to get around this, but they're generally inconvenient, costly, and/or illegal.

1. Billing

Apart from courtesy "guest networks", Internet services are rarely just given away for free. (Even most guest networks aren't really free, or at least not intended to be - you're just not paying for the Internet service explicitly.) So, the ISP must have some way of charging you for the service.

Unless your ISP permits you to physically visit their offices and pay them in cash every month, the billing process will usually require some collection of personal information. Normally, this includes the mailing address that is associated with your payment mechanism. For most people, this also happens to be their business or residential address. In the case of non-wireless services, this is also probably the location from which you'll be consuming the service (i.e.: connecting to the Internet).

In some cases, you may be able to avoid giving away your physical location through billing processes. For example, you could use a P.O. Box as your mailing address. However, some ISPs and/or payment providers (e.g.: credit card companies or banks) may not permit this.

2. Installation

Non-wireless broadband Internet services generally require some amount of equipment to be installed, or special cables run, at the location from which the services will be used. This necessitates telling the ISP where you're going to be connecting from, so that they can send technicians out to set up the devices and cables necessary for you to connect.

You can get around this by using wireless services, such as your cellular phone provider, but these connections are usually slower and less reliable and they often can still be traced. Another work-around could be using dial-up connections, but these will likely be even slower and again are still not immune to other tracking mechanisms.

3. Emergency Services

If your ISP is also providing cellular, VoIP, or other phone services, they may be required by law to know your location in order to properly route emergency calls and direct police and rescue personnel to you when needed.

One way that providers may do this is through a GPS receiver in the device that is used to initiate the emergency call. In the case of VoIP services, the receiver may be built into the VoIP gateway. This is why some providers will recommend that you place your gateway device near a window during setup (if not permanently) - that enables the built-in GPS receiver to have better visibility to the satellites required to determine its location.

You could try to negate the GPS lock by use of a Faraday cage or other GPS-opaque structure over the gateway device. However, if your service is coming through a wireless connection, this will most likely degrade or flat-out kill your Internet link as well. Besides, if a GPS lock is not available (or the system isn't using GPS to begin with) the provider will usually fall back to mechanisms listed in other sections of this answer.

4. Subscriber Authentication

When you connect to your ISP, the network will need some way of authenticating you before providing service. This allows them to verify that you are indeed one of their customers, and to determine what quality of service (e.g.: bandwidth allowances and caps) they should provide to the connection per the terms of your subscription.

This is practically unavoidable, without illegally hijacking someone else's authenticators. While it may not necessarily provide your ISP with your location directly, (except perhaps by way of items 1 and 2) it does enable the ISP to associate location data gathered from other sources (e.g.: items 3 and 5) with your identity.

5. ISP-Owned Infrastructure

This is the piece that is probably the hardest and most expensive to avoid, and is effectively the whole reason you have to pay someone else for Internet service. Chances are, the device that your system is directly connected to (if not, then probably the first hop outside of your LAN) is owned and maintained by your ISP.

Your ISP probably also controls the next few devices after that, and these devices are not likely to be easily accessible - lat alone movable - by you. By the very nature of their business, the ISP must know the locations of these devices in order to maintain and repair them in a timely fashion when needed. If these devices aren't actually in the same room or building you are in, they are still probably very close to you - within a couple miles or less.

This applies to most wired and wireless broadband services. For wired services, the "gateway" device that is on-premises is usually provided and maintained by the ISP. If not, then it will be the next hop after that and a few more from there.

For wireless services, the ISP will usually own the transceivers (e.g.: cell towers) that your device is directly communicating with. If your device is only within range of one or two provider-owned transceivers, they may not be able to pinpoint you very closely. Three or more, and they can usually nail you down pretty well. (Of course, your device is only ever actually using one of the ISP's transceivers at a given time, but they will often have several within "listening" range of your device in order to have good service coverage.)

The workarounds for this are usually fairly expensive, very inconvenient, or flat-out illegal. In some cases, it may be just plain impossible. Essentially, they all entail getting your device off of ISP-owned infrastructure for at least the first hop past your LAN.

For wired connections, this tracking will often not be avoidable because the gateway links that your device needs to connect to are unreachable outside of the ISP's networks. A likely exception to this would be dial-up networks. However, these links tend to be very slow and they are usually still traceable to some extent via Caller ID. (Caller ID can be spoofed, but that is often illegal.)

For wireless connections, avoiding ISP-owned infrastructure usually necessitates substantial physical relocation (or subscribing to a provider who does not have transceivers near your usual location) and will often incur additional fees (typically called "data roaming charges" or similar) as well as service degradation and/or limitation. If the wireless service is through a device also used to make phone calls (as most wireless Internet services tend to be), trying to avoid ISP collection of location data like this could ultimately be foiled by item 3 above anyway.

7

It's not entirely clear from your question what you're after, but fundamentally your ISP know who you are because they're providing the service you're using to connect to the internet. This will either involve a physical connection to your property plus all of the associated billing or a mobile connection which is triangulated between the cell masts your device is connected to in order to get a signal.

Once you're actually "connected", there is DHCP providing you an IP address which will undoubtedly be logged, or you'll have a static IP address that won't change, in both instances this IP address will be assigned to your ISP and as such any lookup for information relating to your IP address will contain some basic (often reasonably accurate) geographical information along with the company the IP has been assigned to.

Since your IP address is essentially the internet equivalent of your postal address, and is required for routing information you request over the internet, any website you connect to you will have access to it, any email server you connect to will have access to it, etc.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .