Strava's global heatmap could reveal the location of your home, according to researchers
Findings suggest setting your account to private mode does not mean your Strava data is private, although it is easily turned off
Privacy and safety concerns have been raised about Strava’s global heatmap feature, with research suggesting that it could reveal user locations, even on private mode.
Researchers at the North Carolina State University in Raleigh found that they could locate the start and end point of activities, especially in low-populated areas.
A spokesperson for the activity-tracking application said that Strava "does not track users or share data without their permission".
Introduced in 2018 to “improve user experience”, the global heatmap feature enables users to find new hiking, running and cycling routes, popular exercising hotspots in their area, and even find new training partners, should it be used in a certain way.
The feature is based on GPS data and is updated every month. It compiles data from the previous two years, compiling it into one single map, highlighting areas of activity with bright yellow and white lines.
Just one month after introducing it to the popular fitness app, Strava provided an opt-out function for the heatmap after discovering that it could pose a privacy and safety risk to its more than 100 million users.
Furthermore, there were even concerns that it was exposing secret or sensitive information through its global heatmap.
In a paper published last month, researchers said that people could use the heatmap feature to track Strava users to their home addresses.
Get The Leadout Newsletter
The latest race content, interviews, features, reviews and expert buying guides, direct to your inbox!
The study found that all Strava users in a given lesser populated area can be looked up, to the extent that it is allegedly even possible to discover where users exercise routes begin and end.
“Strava users expect their personal information to be protected, and our work shows that this is not always the case,” Anupam Das, one of the authors of the paper, said. “This could be particularly problematic for users concerned about stalkers or have other reasons to desire that their location data be kept from the public.”
“In a densely populated area, with lots of routes and lots of users, there is so much data that it would be difficult to track any specific person,” Das added. “However, in areas where there are few users or few routes, it becomes a simple process of elimination, particularly if the person someone is looking for is a highly active Strava user.”
Das also suggested that making an account private doesn’t guarantee protection against this, although Strava told his researchers that its heatmaps only use aggregate data, making it impossible for anyone to capture private information.
“We did reach out to Strava about this, and the company has said it does not share heatmap data unless several users are active in a given area,” said Kevin Childs, first author of the study paper. “However, we were still able to identify the home addresses of some users in certain areas using the heatmap.”
"The safety and privacy of our community is our highest priority," a spokesperson for Strava said this week. "We've long had a suite of privacy controls (including Map Visibility Controls) that give users control over what they share and who it’s shared with.
"Strava does not track users or share data without their permission. When users share their aggregated, de-identified data with the Heatmap and Strava Metro, they contribute to a one-of-a-kind data set that helps urban planners as they develop better infrastructure for people on foot and bikes, and makes it easy to plan routes with the knowledge of the community.
"The Global Heatmap displays aggregated data from a subset of Strava activities and will not show ‘heat’ unless multiple people have completed an activity in a given area. Any Strava user who does not wish to contribute to the Heatmap can toggle off the Aggregated Data Usage control to exclude all activities or default their Activity Visibility to be only to themselves (`Only You`) for any given activity.
"We are consistently strengthening privacy tools and offering more feature education to give users control over their experience on Strava. This includes simplifying our Privacy Policy with our Privacy Label at the top."
Thank you for reading 20 articles this month* Join now for unlimited access
Enjoy your first month for just £1 / $1 / €1
*Read 5 free articles per month without a subscription
Join now for unlimited access
Try first month for just £1 / $1 / €1
Tom joined Cycling Weekly in early 2022 and his news stories, rider interviews and features appear both online and in the magazine.
He has reported from some of professional cycling's biggest races and events including the Tour de France and the recent Glasgow World Championships. He has also covered races elsewhere across the world and interviewed some of the sport's top riders.
When not writing news scoops from the WorldTour, or covering stories from elsewhere in the domestic professional scene, he reports on goings on at bike shops up and down the UK, where he is based when not out on the road at races. He has also appeared on the Radio Cycling podcast.
-
Top 5 five U.S. cities with the most bike commuters revealed
According to new research from DesignRush, Corvallis, Oregon, has the highest percentage of workers that regularly commute to work by bike.
By Kristin Jenny Published
-
ENVE Composites under new ownership: private Utah investment firm takes the wheel
Amer Sports, the parent company of Enve Composites, announced today that the Enve brand has been acquired by PV3, a Utah-based private investment firm allegedly owned by avid cyclists.
By Anne-Marije Rook Published
-
Jonas Vingegaard’s former team reclaims Coll de Rates KOM from Juan Ayuso
18-year-old Peter Øxenberg Hansen now officially holds Strava title, beating UAE Emirates rider by 11 seconds
By Tom Thewlis Published
-
'I got the dreaded uh-oh email from Strava... he took my KOM by 15 seconds': Phil Gaimon wins battle over world's hardest segment
American holds 249 watts on gruelling five-hour Mauna Kea effort to reclaim crown
By Tom Davidson Published
-
‘Dear tiger': Why do Wout van Aert’s Strava files all have strange names?
The Visma-Lease a Bike rider has been feeling musical on a training camp
By Tom Davidson Published
-
'People aren't as snooty or uptight': gravel boom shows no signs of slowing, and here's why
Gravel bike riding is "one of the fastest-growing sports" on Strava, with 55% more people doing it in 2023
By Tom Davidson Published
-
Strava analyzed all our activities and found that boomers bike, Gen Z likes the party pace and we’re all held back by work
Strava’s Year in Sport takes an analytical deep dive into the habits of 120 million athletes world wide. Here's what they found.
By Anne-Marije Rook Published
-
Strava appoints YouTube exec as new CEO hopes to 'take it to the next level'
Michael Martin will lead the exercise app from 2 January 2024
By Tom Davidson Published
-
Strava introduces messaging
The activity-tracking app can now be used to chat to your fellow cyclists and runners
By Adam Becket Published
-
‘I’m in serious danger’ - Alpe d’Huez QOM holder reacts to climb’s Tour de France Femmes inclusion
Illi Gardner has the best time on over 8,000 Strava climb segments
By Tom Davidson Published