What Gravy Analytics / Venntel (Unacast) does with your data
Cars, carriers, apps and travel. A data broker: people don't sign up with it.
Data current as of 2026-09-25; statuses change.
- Program
- Location data broker fed by third-party app SDKs and suppliers
- Role
- Data broker, location data broker. Location data broker fed by third-party app SDKs and suppliers.
- Members
- 1 billion accounts (2024). Devices, not accounts: about a billion mobile devices daily, per the companies' own claims cited by the FTC.
- Retail media
- None found in the research
What it collects and does with your data
- The FTC alleged Gravy and Venntel claimed to collect, process, and curate more than 17 billion signals from around a billion mobile devices daily, sold non-anonymized location data, and used geofencing to sell lists of people at medical and religious events.
- A hacker obtained files from Unacast's Amazon cloud environment via a misappropriated key; the published sample included location data from dating, fitness, health, transit, and game apps.
- A researcher's 1.4 GB sample held about 30 million records from 3,455 Android apps; the hacker claimed 10 TB total (unverified claim).
Sensitive data
- precise geolocation
- visits to health facilities and places of worship
- inferred sensitive characteristics (health, political, religious)
Enforcement and litigation
1 matter in the research. Where the research says alleged, pending, or settled without admitting wrongdoing, so does this page.
- FTC order finalized 2025-01-14 banning sale or use of sensitive location data except limited national security and law enforcement uses. Status: final.
Who else holds your data
Organizations holding a copy of your data, as the research counts them: at least 4. The app you installed, its SDK or bid-stream supplier, Gravy/Unacast, Venntel's government buyers; plus whoever holds the Jan 2025 breach copy.
Third parties: Named: Commercial and government customers (Venntel sold to government)
Companies the research links to Gravy Analytics / Venntel (Unacast)
None. The research documents no flow to Gravy Analytics / Venntel (Unacast) from a company on the calculator's list, so the calculator doesn't count it for anyone.
Data practices score
11 of 15. Five components, each 0 to 3. How the score works
- Sells or shares
- 3
- Enforcement
- 3
- Retail media scale
- 0
- Sensitive data
- 2
- Opt-out friction
- 3
Estimated emissions for one person
Research gaps
- Number of customers and apps currently feeding Unacast.
- Confirmed full size of the 2025 breach.
Sources (4)
- https://www.ftc.gov/news-events/news/press-releases/2024/12/ftc-takes-action-against-gravy-analytics-venntel-unlawfully-selling-location-data-tracking-consumers 2024-12-03
- https://techcrunch.com/2025/01/13/gravy-analytics-data-broker-breach-trove-of-location-data-threatens-privacy-millions/ 2025-01-13
- https://www.kaspersky.com/blog/geolocation-data-broker-leak/53050/ 2025-01
- https://www.ftc.gov/news-events/news/press-releases/2025/01/ftc-finalizes-order-prohibiting-gravy-analytics-venntel-selling-sensitive-location-data 2025-01-14
The Sources page lists these with their kind and what else uses them.