The Ghost
in the Export

I spent a day pulling months of a life out of nothing but ordinary account exports. Not hacks. Exports. The "download your information" button every platform is legally required to give you. Facebook, Google, Snapchat, Uber. Point a machine at those folders and ask it questions, and by lunch it can tell you the nights someone slept where, which apartment they searched for, which places they did and did not go, and the minute their location history got switched off and back on.

That is the part nobody tells you. The danger is not some hacker in a hoodie. The danger is that the data already exists, it is already organized, and the only thing standing between it and anyone who wants it is a password you probably reused.

01The phone book for stalkers

Type a name into any people-search site and you get a home address, phone numbers, relatives, past addresses. Lawfare has catalogued years of stalking and domestic-violence cases where the abuser got the victim's location from one of these brokers, and it is still legal in most of the country. Vermont was first to ban buying brokered data for stalking, back in 2018. Most states have nothing.

You can opt out. It mostly does not work. Consumer Reports ran 32 volunteers through 13 sites and seven paid removal services for four months: 35 percent of records gone, the best two near two thirds, the worst at 4 and 6 percent. Doing it by hand scored 70 percent, and then the data crawls back.

02Your location is for sale, and it already leaked

In January 2025 a location broker called Gravy Analytics got breached. The hackers claimed 17 terabytes; the sample tied device locations to ad IDs pulled from dating apps, games and period trackers. Gravy's subsidiary Venntel sold that same data to government agencies. The FTC had barred Gravy from selling sensitive location data a month earlier. The breach happened anyway.

The FTC has now chased a whole line of them: X-Mode, InMarket, Gravy, Mobilewalla, and in May 2026 Kochava. Every order says the same thing, you cannot sell "sensitive" location data without consent. Yale's review noted the Kochava order quietly narrowed what counts as sensitive. The trade continues; it just has a form now.

Then the cameras. Flock license plate readers sit at the mouth of subdivisions all over Missouri. In February 2026 Mountain View, California, shut its whole network off after finding Flock had shared the city's plate data with hundreds of outside agencies, federal ones included, without permission. Lee's Summit locked down outside logins to its cameras in September after officer misuse. Your car's movements are a database, and you never signed up.

03Google's copy of your life

Google Timeline is the quiet one. A map of everywhere your phone has been, chopped into visits and drives, the address guessed. On 29 June 2026 the Supreme Court held in Chatrie v. United States that police pulling that history through a geofence warrant is a Fourth Amendment search. Good. But read the fine print: Google had already moved Location History off its servers and onto the phone itself, which means the government has a harder time getting it, and anyone who holds your phone, or signs into your account, has an easier one. It exports from the device in one file. I know, because I read two of them.

04The chat window is not a confessional

The head of OpenAI said it himself in July 2025: there is no legal privilege for what you tell a chatbot. Not therapist, not attorney, nothing. A month earlier a federal judge in the New York Times case ordered OpenAI to preserve every output log, deleted and temporary chats included, and users were not told for three weeks. In November 2025 the court ordered 20 million chat logs handed to the plaintiffs; in January 2026 the district judge upheld it. Any lawyer in any case can now subpoena an account's conversations. People are typing their divorces, their relapses and their worst nights into a box that is discoverable.

05The helpers you install are the new spyware

Researchers found 30-plus fake "AI assistant" browser extensions on about 260,000 machines, running hidden frames that read what you typed and kept a way back in. Others were caught uploading whole chatbot conversations plus browsing history every 30 minutes, a trick that had already shipped inside a VPN extension with millions of installs. In September 2026 a researcher showed the agentic browsers can be fed a full set of instructions through a channel they already trust, so the assistant that can click and type for you can also read your files and screenshots for someone else. Microsoft rated its version medium severity. Medium.

06The breaches never stop

SpyCloud counts nearly 2,000 confirmed breach sources so far in 2026, more than 11 billion records and 780 million exposed passwords. The Identity Theft Resource Center logged 471 million victim notices in the first half of 2026, more than all of 2025. An AT&T dataset of 176 million records resurfaced in February with the Social Security numbers decrypted this time. If your password is on one of those lists, every export below belongs to whoever bought it.

07What one account hands over

Sit with this one, because it is the part I proved instead of read.

A Google Takeout of one account holds every place visit and drive for seven months, every search with the exact device that made it, every video with a timestamp, every page title, the moment the Timeline switch went off and the second it came back on, including which phone did it. A Facebook export holds every login with IP, device and city, which is every wifi network someone stood on, by night. A Snapchat export holds every conversation and, for every call, the city it was placed from. An Uber history holds the pickup and drop-off of every ride, the cancelled ones included.

None of it needed a court. It needed a login. Then it needed a machine that can read 300,000 messages without getting bored, which is the new part. Five years ago this picture took a private investigator and weeks. Now it takes a chat window and an afternoon. I was in my own records. The tooling does not care who is holding it.

08The four-digit pin

A burglar kicks your door in, takes something shiny and leaves. That's the old crime. Here's the new one.

Your Social, your license, your cards, your bank, every place you go and the hour you fall asleep, all of it is on the phone, and for most people all of it sits behind one four-digit PIN. Your password manager syncs to the cloud because you were scared of losing it, so it opens with that same PIN. Your two-step codes come by text and e-mail, which land on that phone. Your on-device passkeys unlock with that PIN. Once they have one pass, they have the whole set. It is one factor wearing five costumes.

The only things that hold are the ones not on the phone: a long random password you never reuse, and a physical key that has to be touched. A text code is not a lock, it's a doorbell.

09Verification is theater

Here's what the security people won't say out loud: permission can be faked, and almost every gate is built to accept it.

The apps will ask for a selfie to prove you are you. On my own accounts I have watched that step simply not happen: "forgot password," the code in the e-mail, the saved card that autofills and matches, and I was back in. The photo step never fired. That is not identity verification. It's a recovery flow with a face on the front door and the back door propped open.

The assistants are the same. I fed a machine exports all day and it could never once check whether I had the right to. It took context. Say the words, legitimate purpose, my own records, and the most capable model on the market will happily burn every token it has helping you, and be glad it helped. I know, because I said them, they were true, and it had no way to tell.

10The fifty-dollar machine

Everything above about AI assumes the AI is somewhere else, behind a login, with a company's lawyers watching. Mine is not. My workhorse is a fifty-dollar PC with a graphics card built when I was in middle school, the oldest machine in the room, and it runs open models with no safety layer at all. Anything the commercial AI says it can't do because it's unsafe, that box does on the first try, offline, with nobody logging it.

Give it one reference photo and it puts any face on any body in any scene. It could put any famous face into any scene, a fresh one every day for the next century, and that's the funny version. The same card, the same model, the same ten minutes, makes the cruel version too. The gate was never the model. The gate was the price of a graphics card, and that price is now fifty dollars at a pawn shop.

Stay woke.  NoizeLabs sees it too.