It is 11 pm in a city where same-sex relationships remain socially punishable even if no longer criminally prosecuted. A man opens Grindr, scrolls the grid, messages someone two kilometers away. The app needs his location to do its job. That’s the entire premise. He knows the app knows where he is. What he doesn’t know is that this location data is being packaged alongside his device identifiers and passed to advertising networks. A data broker is buying it. A determined person can purchase the same dataset and trace the device back to his apartment building. It could be a journalist, a hostile family member, or a government contractor.
He thinks the risk is someone seeing his profile. The risk is someone who never opens the app.
What dating apps actually collect
Most people understand that dating apps know who they’re attracted to. Fewer understand the full inventory.
Precise GPS coordinates — not neighborhood-level, but accurate enough to identify which building you’re in — are core to how proximity-based apps function. The location data they collect is more precise than what most apps request, because imprecision would break the product.
Beyond location: photos, sexual orientation entered explicitly, religious and political preferences from profile questions, message content stored on company servers without end-to-end encryption. And then the behavioral layer — who you swipe on, who you match with, how long you linger on a profile. This data is rarely mentioned in privacy summaries. It is collected continuously.
Grindr and the advertising SDK problem
In 2020, the Norwegian Consumer Council published a report called “Out of Control.” It documented how Grindr shared user data with multiple advertising partners through its in-app advertising SDK. That data included precise location and the fact that the user was on Grindr. The data flows happened automatically, continuously, without meaningful user consent.
The Norwegian Data Protection Authority (Datatilsynet) responded with a fine of NOK 65 million — approximately €6.5 million — in 2021. Grindr appealed. The Privacy Appeals Board (Personvernnemnda) upheld the NOK 65M fine on appeal in 2022; a later reduction to NOK 6.5M came through subsequent court proceedings. The behavior that triggered the fine had already run for years.
In January 2023, the Federal Trade Commission fined Grindr $7 million in a separate action focused on the company’s practice of sharing users’ HIV status with advertising partners. HIV status — disclosed by users in their own profiles, in some cases — was flowing to advertisers. The FTC’s complaint made clear this was not an accidental data leak. It was a structural consequence of how the advertising SDK was integrated.
Two enforcement actions, two countries, two separate violations. Both trace back to the same underlying problem. A company built its revenue model on selling the data of a uniquely vulnerable user population.
The Catholic priest case
In July 2021, The Pillar — a Catholic news outlet — identified a senior official of the United States Conference of Catholic Bishops as a Grindr user. They purchased commercially available location data from a data broker, cross-referenced it with known locations associated with the official, and identified his device from the movement pattern. He resigned within days.
The data used was sold as “anonymized.” The brokered dataset contained no names. What it held was a device identifier, a timestamp, and a GPS coordinate. That set repeated tens of thousands of times, tracing the movement of a specific device across months. Device identifiers are pseudonymous, not anonymous. Pair them with any other identifying dataset and you can undo the anonymity. That could be an employer’s records, a church staff directory, or a lease. The Pillar did exactly this.
The case collapsed the standard reassurance. Defenders of location data sales argue that anonymized data is safe. What “anonymized” means in practice is that a name has been removed from a file that still contains everything necessary to recover it.
The trilateration attack
Apps that display distance to nearby users (“1.2 km away”) have a structural weakness. A person sets up three fake accounts at different known spots. From each account, they query the same target profile. With three distances, they can solve for the target’s exact coordinates. Researchers demonstrated this against Grindr concretely. Grindr removed exact distance figures afterward. Altered versions of the feature persist across many apps and keep part of the same weakness.
The attack requires patience and multiple accounts. That’s all.
The India context
The Supreme Court’s 2018 decision in Navtej Singh Johar v. Union of India struck down Section 377 of the IPC as it applied to consensual same-sex relations between adults. This was a significant legal change. It did not eliminate the practical risks that LGBTQ+ Indians face.
Employment discrimination, family rejection, and social ostracism remain common outcomes when someone is outed — regardless of whether criminal prosecution is possible. In many parts of India, the gap between legal status and social reality is wide enough that exposure through a dating app carries serious consequences.
Grindr, Scruff, HER, Tinder, and Bumble all have Indian user bases. The Digital Personal Data Protection Act designates certain categories of data as sensitive, which provides a framework. But enforcement is still developing. And nothing in the Indian regulatory landscape matches the Norwegian Consumer Council or the FTC’s active monitoring of data broker sales.
No organization in India is systematically tracking whether dating app location data from Indian users is appearing in commercial data broker catalogues. It almost certainly is.
Why “just don’t use the apps” is the wrong answer
The people at highest risk from dating app data sales are often those for whom the apps matter most. The apps connect people who cannot safely be visible in physical spaces. The privacy failures are worst precisely for the users who need privacy most. That’s not an argument against using the apps. It’s an argument for understanding what you’re accepting when you do.
What you can do
On Grindr: Settings > Privacy > Enable “Incognito Mode.” This keeps your profile out of distance-based searches. That limits the trilateration attack surface and reduces how broadly your profile is visible to other users.
Use approximate location on your phone. Android 12 and iOS 14 both allow you to grant apps approximate location rather than precise location. Many dating apps still function with approximate location — they can tell you someone is nearby without knowing your address. Go to your phone’s app permissions and set location to “approximate” for any dating app that doesn’t require precision to be useful to you.
Set location permission to “while using the app” only. No dating app needs location access when you’re not actively using it. “Always on” location permissions let the app record your location at any time. That includes when you’re at home, at work, or at a place you wouldn’t want recorded.
Separate your dating app identity from your primary identity. Use an email address not linked to your real name. Avoid Facebook login — it passes your identity directly to the app and connects your dating profile to your social graph.
Review app permissions. Many dating apps request access to contacts, microphone, and photo library beyond what they need to function. Revoke permissions you didn’t consciously grant.
The data that dating apps generate is location attached to sexual identity attached to message content. The combination is more dangerous than any single element. Treating it that way — limiting precision, separating identities, restricting permissions — is not paranoia. It is proportionate.
What you can do right now
Want to see what data brokers expose about you? See what a scan finds → shows an example report: the kinds of sites that list your name, phone, and address. Once KnytX Shield launches it will find and remove these automatically. Join the waitlist to get in early.