Google agreed to pay $62 million to resolve a class action lawsuit alleging the company illegally tracked the location data of nearly 250 million U.S. smartphone users, even after those users believed they had disabled location tracking. The settlement, approved by a federal judge, represents one of the largest privacy-related payouts in recent years and addresses a fundamental breach of user trust: Google continued collecting and storing precise location information on devices belonging to people who had explicitly turned off location services.
For example, a user who disabled “Location History” in their Google settings still had their location continuously tracked through the separate “Web and App Activity” feature—a distinction buried deep in the settings menu that most users never discovered. The case originated from a 2018 Associated Press investigation that exposed Google’s deceptive location-tracking practices. Rather than distributing settlement money directly to affected users, the court approved a novel approach: the $62 million will fund nonprofits dedicated to privacy rights, meaning class members won’t receive individual cash payments. However, the settlement requires Google to make significant changes to how it discloses location practices and manages user data going forward, potentially preventing similar violations in the future.
Table of Contents
- What Did Google Do Wrong With Location Data Tracking?
- How Google’s Location Tracking Violated User Privacy Expectations
- What Are Google’s Obligations Under the Settlement?
- Who Receives Settlement Money and How Much?
- Why Your Location Data Matters Beyond This Lawsuit
- How This Settlement Affects Your Google Account Today
- What This Settlement Means for Tech Company Accountability
- Conclusion
What Did Google Do Wrong With Location Data Tracking?
Google’s violation centered on a bait-and-switch approach to location settings. When users navigated to their account settings and toggled “Location History” to off, they believed their location was no longer being recorded. However, Google continued collecting precise location data through a separate feature called “Web and App Activity.” The company never made it clear that disabling one setting did not stop the other, creating what legal experts called a “dark pattern”—a deliberately confusing interface designed to keep users tracked regardless of their choices. The scope of this deception was staggering. Over several years, Google tracked approximately 250 million U.S.
users this way, collecting billions of location data points that revealed where people lived, worked, worshipped, and spent their time. This data wasn’t just stored—it was used to build detailed behavioral profiles linked to users’ Google accounts, often without meaningful consent. A user who visited a medical clinic multiple times would have that pattern recorded and linked to their Google identity, even if they believed all location tracking was disabled. What made this illegal under consumer protection laws was the deceptive intent. Google presented itself as respecting user privacy preferences while actually circumventing them through technical complexity. The company had every incentive to keep users tracked—location data powers targeted advertising, the core of Google’s revenue model—but no incentive to clearly explain the settings users needed to change to actually stop being tracked.
How Google’s Location Tracking Violated User Privacy Expectations
The privacy violation here went deeper than simple data collection. When Google users saw a toggle switch labeled “Location History,” they made a reasonable assumption: flipping it off would stop Google from tracking their movements. This assumption is how normal people interact with technology. We don’t read hundreds of pages of settings documentation; we look for a control that seems relevant and use it. Google exploited this basic human behavior by creating a false sense of control. The legal problem was made worse by the timeline. Google implemented this dual-tracking system years before the 2018 AP report exposed it. That means hundreds of thousands of users were tracked for extended periods—sometimes years—without any legitimate way to stop it.
Even today, many users don’t understand the distinction between Location History and Web and App Activity. This isn’t user error; this is a fundamental failure in disclosure. A legitimate warning would read: “Disabling Location History does NOT stop location collection. You must also disable Web and App Activity to fully opt out.” Google never provided that warning in any obvious way. One significant limitation of the settlement is that it doesn’t provide direct compensation to most users. Instead of distributing settlement funds as individual payments (which would be relatively small per person anyway), the court directed the money toward nonprofit organizations focused on privacy advocacy. This means the settlement compensates the class more through systemic change—better privacy practices going forward—rather than immediate cash. Whether this actually benefits the users who were wronged remains an open question.
What Are Google’s Obligations Under the Settlement?
The settlement imposes four major requirements on Google going forward. First, Google must notify all users who have Location History enabled about how the company collects and uses location data, and explain the relationship between Location History and Web and App Activity settings. Second, the company must clearly explain what each setting actually does in language that ordinary users can understand. This means no more burying the truth in dense technical documentation. Third, Google agreed to implement an automatic data deletion policy. The company must now delete location data no later than 18 months after users enable collection, rather than retaining it indefinitely as it previously did.
This 18-month window is significant because it ensures data doesn’t accumulate unchecked, reducing the harm from any future breaches or misuse. Additionally, Google must maintain this deletion policy for at least three years, giving the settlement teeth beyond just immediate changes. Fourth, Google must cease the specific deceptive practices that led to this lawsuit. The company can no longer silently collect location data through one setting after a user disables another supposedly related setting. This doesn’t mean Google stops collecting location data altogether—users can still choose to enable Location History or Web and App Activity—but the choice must be genuinely informed and not obscured by confusing interface design. For users who care about privacy, this settlement makes Google’s tracking practices slightly more transparent, but it doesn’t eliminate tracking as an option.
Who Receives Settlement Money and How Much?
The $62 million settlement is structured in an unusual way that reflects the challenges of class action litigation. Of the total, $18.6 million goes to attorneys who litigated the case—a standard practice since lawyers work on contingency and fund the entire lawsuit. An additional $151,756.23 covers the plaintiff’s actual expenses in pursuing the case. Three class representatives—the named plaintiffs representing the entire class—each receive $5,000 for their effort in initiating the lawsuit. That leaves approximately $37 million for the actual settlement fund. Rather than dividing this among 250 million users (which would amount to pennies per person), the court approved distribution to up to 21 nonprofit organizations focused on defending and supporting privacy rights.
These organizations will use the funds for education, advocacy, and policy work to prevent similar privacy violations in the future. The logic is that the class is better served by funding systemic improvements than by providing negligible individual payments. This structure has tradeoffs. On one hand, nonprofit advocacy work can benefit millions of people beyond just those in this class. Privacy protections that result from better legal advocacy or policy changes create value far exceeding any individual payment would have. On the other hand, users who were wronged don’t receive direct compensation, which may feel unfair. Some people view this as holding corporations accountable only if they’re forced to change practices, not if they’re forced to pay people who were harmed.
Why Your Location Data Matters Beyond This Lawsuit
Location data is among the most sensitive information Google collects because it reveals patterns about your life that you probably don’t want shared. If Google knows you visit a particular medical clinic twice a month, it can infer you have a health condition. If you visit a church, mosque, synagogue, or temple on a regular basis, Google can infer your religion. If you visit competitors’ locations, your employer can potentially discover you’re job hunting. This data can be sold to data brokers, leaked in breaches, or misused by bad actors with access to Google’s systems. The broader warning here is that this settlement only addressed Google’s Location History deception. Google collects location data in many other ways that remain largely unregulated: through GPS, WiFi networks, Bluetooth signals, and IP addresses.
Even if you manage Google’s Location History and Web and App Activity settings perfectly, Google still knows your approximate location through IP tracking. Mobile apps that request location permission share that data with Google through the Android operating system. The real privacy threat is far larger than any single setting. Another limitation: this settlement doesn’t prevent Google from collecting location data in the future. It only requires transparency and reasonable deletion practices. Users who want to avoid Google’s location tracking entirely still need to take active steps, like using a non-Google phone OS, avoiding Google services, or using a VPN. The average person who simply reads Google’s new disclosures and then enables Location History will still be tracked comprehensively.
How This Settlement Affects Your Google Account Today
If you’re currently a Google user, the settlement means you should expect to receive clearer notifications about how Location History works and what data Google collects. You may see new help articles or in-account messages explaining the distinction between different tracking settings. Google is required to make these disclosures, so if you use Gmail, Google Search, or any Google service linked to a Google account, you’ll encounter this new information.
The practical impact is straightforward: take the time to review your Google account privacy settings. Go to your Google Account, navigate to Data & Privacy, and review what’s enabled under Location settings. You can disable Location History entirely if you prefer, and you can also check Web and App Activity. For users who depend on some Google services—like using Google Maps—complete privacy isn’t possible, but you can make informed choices about which Google services get access to your location.
What This Settlement Means for Tech Company Accountability
The Google location settlement signals that courts are increasingly willing to hold major tech companies accountable for deceptive privacy practices. This isn’t a small fine that a company can dismiss as a cost of doing business; $62 million required Google to change actual practices. However, the settlement also reveals the limits of class action litigation. Even with 250 million affected users, individual compensation is so small that direct payments become impractical.
Looking forward, similar cases are likely to emerge. Apple faces questions about its own location practices, and Facebook (Meta) has settled multiple privacy-related lawsuits. The challenge for consumers is that technology companies continue to find new ways to collect data because the economic incentive is so strong. Regulations like California’s California Consumer Privacy Act (CCPA) are starting to create legal frameworks around consent and transparency, but enforcement remains slow. This settlement is a meaningful win, but it’s one battle in a much larger struggle over who controls and benefits from personal data.
Conclusion
Google’s $62 million settlement represents a significant recognition that the company violated user privacy by tracking location data even after users disabled the relevant settings. The lawsuit exposed a deceptive design pattern where disabling one setting left another tracking mechanism active, allowing Google to collect location information on 250 million U.S. users without clear consent. The settlement requires Google to improve transparency about its location practices, implement automatic data deletion, and stop using deceptive interface design to keep users tracked.
If you were affected by this class action, you won’t receive a direct payment, but the settlement funds privacy advocacy organizations that work to prevent similar violations. More importantly, it establishes precedent that tech companies must be honest about their data collection practices. Review your own Google account privacy settings now, understand what location data Google can and cannot collect, and make informed decisions about which services you use. This settlement didn’t eliminate Google’s location tracking, but it made it harder for the company to hide.