Instagram’s recent introduction of a map feature has sparked significant concern among users, particularly in Ukraine. Instead of providing a user-friendly map experience, the feature employs passive tracking that automatically shares a user’s location each time the app is opened.
This functionality appears at the top of the direct messaging (DM) tab and expands on traditional status updates. It combines two distinct types of location tracking:
Active geolocation allows users to manually tag their locations in stories, posts, or reels, giving them control over what they share. In contrast, passive geolocation—the more controversial aspect—automatically records and displays a user’s last known location to friends whenever the app is accessed, even if the user is simply scrolling through their feed without posting.
The primary issue arises from the fact that, without careful manual adjustments to privacy settings, precise location data can be visible to anyone on a user’s mutual following list. This includes former partners, colleagues, or acquaintances, raising significant privacy concerns.
Experts have voiced alarm over this feature. Tracy Chow, founder of the digital safety service Block Party, points out that developers often claim to offer straightforward privacy controls but design settings in a way that leads users to inadvertently share more sensitive information than intended.
Common Sense Media has also highlighted potential dangers for teenagers, including risks of cyberbullying and physical stalking. Additionally, the feature poses other hidden threats:
- Relationship toxicity: Constant tracking can create a “digital leash,” fostering psychological abuse and controlling behaviors.
- False sense of parental control: While parents may be aware of the feature’s activation for teen accounts, they cannot see the actual location without the child’s consent, leading to a misleading sense of security.
- Leakage of sensitive data: Regular tracking can reveal home addresses, workplaces, and visits to medical professionals, effectively creating a “life map” that could be exploited by malicious actors.
In Ukraine, where a full-scale war is ongoing, the implications of geolocation tracking extend beyond personal comfort to fundamental safety concerns. Continuous geotracking leaves a digital footprint that adversaries could use for:
- Data collection,
- Monitoring the movements of military personnel and volunteers,
- Planning criminal activities.
Instagram has stated that it retains location data for only three days and does not use it for targeted advertising. However, experts caution that recorded data could be accessed by third parties through hacking incidents or legal requests.
To disable the automatic sharing of location, experts recommend completely turning off the feature. Users can do this through the Instagram app by following these steps:
- Go to your profile settings.
- Select “Who can see your location?”
- Set it to “Nobody.”
- Avoid manually adding geotags to new posts and stories.
Additionally, users can adjust their smartphone’s operating system settings:
- For iOS: Go to Settings > Privacy > Location Services > Instagram > select “Disable” (or “Never”).
- For Android: Go to Settings > Apps > Instagram > Permissions > Location > select “Deny.”
The introduction of Instagram's new map feature has raised significant privacy concerns, particularly in Ukraine, where passive location tracking could pose serious risks. Experts warn that automatic sharing of location data may expose users to various dangers, including stalking and data leakage.