Metadata Surveillance: What Your Data Reveals Without Content

Metadata Surveillance

Metadata is data about data. While content is what you say, metadata is who you contacted, when, for how long, and from where. Intelligence agencies and law enforcement often argue that they are only collecting metadata, not content, but metadata can be far more revealing than people realize.

Types of Metadata

• Phone metadata: Numbers called, call duration, time of call, cell tower locations
• Email metadata: Sender, recipient, subject line, timestamps, IP addresses
• Web metadata: Sites visited, visit duration, click patterns, referring pages
• Photo metadata (EXIF): GPS coordinates, camera model, time taken, editing software
• Messaging metadata: Who you message, when, how often, group memberships
• Location metadata: WiFi connections, cell tower connections, Bluetooth encounters

What Metadata Reveals

Even without content, metadata paints a detailed picture of your life:

• Call to an oncologist followed by calls to family members suggests a cancer diagnosis
• Regular calls to a specific number at night suggest an intimate relationship
• Calls to a lawyer specializing in divorces reveal personal situations
• Location metadata shows where you live, work, worship, and who you spend time with
• Communication patterns can identify your social network, leadership roles, and organizational structure

Who Collects Metadata

• Carriers: Store call, text, and location metadata for months or years
• Intelligence agencies: Collect metadata in bulk from carriers and internet providers
• Email providers: Log email metadata for all messages sent and received
• Social media: Track messaging metadata including read receipts and typing indicators
• Apps: Many apps collect usage metadata well beyond what is needed for functionality

Minimizing Metadata Exposure

• Use an anonymous eSIM so phone metadata cannot be attributed to your identity
• Use Signal, which minimizes metadata storage by design
• Strip EXIF data from photos before sharing (many apps do this automatically)
• Use a VPN to hide website visit metadata from your internet provider
• Disable unnecessary app permissions that generate metadata
• Be aware that metadata exists even when you think you are being private

As former NSA director Michael Hayden said: We kill people based on metadata. Metadata is not trivial. Protect it with the same seriousness you would protect the content of your communications.