Amazon faces a new federal lawsuit in San Francisco alleging the company collects and sells consumer location data through third-party mobile applications without user consent, using its Amazon Ads Software Development Kit (SDK). The case adds to mounting legal challenges against major tech companies’ data collection practices.
The legal action claims that Amazon and its advertising subsidiary track California residents’ movements and locations through various mobile apps that implement the Amazon Ads SDK. According to the complaint, the collected data includes timestamped geolocation information that reveals where consumers live, work, and visit, potentially exposing sensitive details about religious affiliation, sexual orientation, and medical conditions.
The Amazon Ads SDK, integrated into thousands of mobile applications including NewsBreak and Speedtest by Ookla, allegedly enables Amazon to gather detailed location data from users. The lawsuit contends that consumers are unaware that their sensitive data is being collected by a third party when they interact with apps containing the SDK. The case follows a broader industry pattern of scrutiny over SDK-based data collection, with similar allegations recently made against Allstate and its subsidiary Arity.
Filed on behalf of California resident Felix Kolotinsky, the lawsuit seeks $5 billion in damages for millions of California residents. The legal action alleges violations of California Penal Code § 638.51, which prohibits covert recording or wiretapping using a “pen register,” and the state’s Comprehensive Computer Data Access and Fraud Act (CDAFA).
The case emerges amid increasing regulatory scrutiny of location data collection practices. Recent incidents, including a major data breach at location data broker Gravy Analytics, have heightened concerns about the collection and security of consumer location data. The U.S. Federal Trade Commission has previously taken action against data brokers and analytics firms regarding geolocation data usage for advertising purposes.
The complaint specifically addresses Kolotinsky’s experience with the Speedtest by Ookla app, through which Amazon allegedly collected his data for commercial purposes. The lawsuit comes as Amazon has been working to expand its advertising technology presence across various platforms, while simultaneously facing increased pressure for greater transparency in its data collection practices. Amazon has not yet issued a response to the allegations.
The legal challenge highlights growing tensions between consumer privacy expectations and the widespread use of location data in mobile advertising. It also underscores the complex relationship between app developers, SDK providers, and the end users whose data is being collected, often without their full understanding or explicit consent.
Sources: The Register, San, Android Authority, Business & Human Rights
Follow Us