How Ad Targeting Works: Your Phone Isn't Listening to You, Your Metadata Is

Manos Tsagkias

11 January 2026
Keywords: outreach

A growing number of people believe their phones listen to their conversations and share what they say or do with advertisers. This belief is usually used to explain why they see highly personalized ads shortly after an activity or an encounter—often without having searched for it online.

Fortunately, this is technologically implausible at scale. Continuous speech recognition and transcription on billions of active devices would require enormous processing power. That would either drain a phone’s battery within hours or result in massive, constant uploads of audio data to remote servers. Both are easy to detect and would have been flagged long ago.

Note: This argument addresses only the technical side; I’ll set the legal aspect aside for now—but it’s worth noting that audio is classified as private data and any such processing would have to be explicitly disclosed and regulated under GDPR (in Europe) or similar laws (e.g., in California).

So what’s really happening?

The most likely explanation is far less dramatic and far more effective: data correlation. Apps like Facebook and others have access to location data and can send information in the background. When two people are physically near each other, both devices report their location. The server can then infer co-presence and correlate interests, profiles, and local events (for example, a concert or festival). Ads are then targeted based on shared context and overlapping social graphs—not on recorded conversations. This gets even more powerful through trackers and beacons embedded in websites and accepted via cookies. These allow advertisers such as Facebook and Google to follow users across the web, continuously updating interest profiles and refining ad targeting throughout the day.

What can you do?

  1. Limit location access and background activity to apps that genuinely need it.
  2. Reject cookies whenever possible.
  3. Regularly clear cookies and site data.
  4. Use privacy-focused browsers; for example, Safari includes built-in protections that block many trackers by default.

As chatGPT likes to say: “Your phone isn’t listening. Your digital exhaust is.”