AirTag Privacy, Anti-Stalking, and Business Tracking

Why AirTag anti-stalking protections exist

AirTags shipped in April 2021 into a Find My network that already had hundreds of millions of relay devices. On day one they were one of the most capable consumer tracking devices ever sold at $29. That's great for finding lost keys. It's also the thing that made the stalking concern obvious from the launch week.

So Apple added detection and has kept tightening it. Your iPhone is supposed to notice an unknown AirTag that keeps travelling with you and surface a warning. Google built its own version — Unknown Tracker Alerts — into Android. The two systems aren't identical and neither is bulletproof, but the direction of travel is that an AirTag used to track a person without their knowledge will eventually show up on that person's phone.

How AirTag anti-stalking works on iPhone

• If an AirTag that is separated from its owner travels with an iPhone user for an extended time, the iPhone displays a "Item Detected Near You" notification
• The notification identifies the unknown AirTag's rough travel path and offers to play a sound to locate it
• If the AirTag stays with the person for a longer period, it will begin playing a chirp sound periodically as an audible alert
• The user can tap the notification to get instructions for disabling the AirTag
• This works automatically on iOS 14.5+ without any app install

How AirTag detection works on Android

• Google rolled out "Unknown Tracker Alerts" in Android 15 that scans for unknown BLE trackers including AirTags
• Android can show a notification similar to iOS if an unknown AirTag has been traveling with the user
• Users can play a sound on the detected AirTag to physically locate it
• Apple also released the "Tracker Detect" app for Android, which provides manual AirTag detection
• Unknown Tracker Alerts also detects Samsung SmartTag, Chipolo, and other BLE trackers — not just AirTags

How to check for unknown AirTags yourself

iPhone: open Find My app → tap the Items tab → check for any AirTags listed. Your iPhone will also proactively notify you of nearby AirTags that aren't yours and have been traveling with you.

Android: open Google Find My Device app → on recent versions, check for unknown tracker alerts in settings. Alternatively, install Apple's "Tracker Detect" app from the Google Play Store to manually scan for nearby AirTags.

In either case: if an alert surfaces an AirTag you don't own traveling with you, first confirm it isn't a legitimate one (rental car AirTag, company asset, borrowed bag). If it isn't legitimate, use the app's instructions to disable the AirTag — removing the battery typically stops all tracking.

What these protections mean for legitimate business tracking

Most business AirTag tracking is on assets (tools, vehicles, rentals, equipment) rather than on people or personal items belonging to people. In those cases, anti-stalking alerts generally don't trigger — a tool in a toolbox, a pallet in a warehouse, a trailer at a jobsite has no person consistently carrying it.

Anti-stalking alerts can trigger when: a rental item is used by a customer long enough for their phone to notice it, an employee's issued equipment (laptop, phone accessory) is carried around with them continuously, or a staff member takes a tagged asset home over multiple days.

For business tracking, the practical implications are: 1) disclose tracking in the rental agreement or employee handbook so alerts aren't a surprise; 2) for theft recovery, the first 24–72 hours are typically the strongest window before anti-stalking alerts escalate; 3) hidden placement on high-value anti-theft assets reduces the chance of a thief finding and removing the tracker after an alert.

AirTag privacy by design — what Apple does and doesn't collect

• AirTags store no personal data, no user account info, no previous locations
• The Bluetooth identifier broadcast by an AirTag rotates every ~15 minutes, making it harder to track across time
• Location reports are end-to-end encrypted — only the owner's device has the decryption key
• Apple itself cannot see any individual AirTag's location — the data is encrypted server-side
• There's no subscription, no data collection, no tie-in to other Apple services beyond the Find My network

Is Find My itself a privacy risk?

The Find My network has been thoroughly analyzed by security researchers since launch. Apple's design (rotating identifiers, end-to-end encryption, anonymous relay) limits what Apple itself or a malicious actor can learn even with access to server data.

The main residual privacy risk is someone using an AirTag to track another person without consent. Anti-stalking alerts exist specifically to address this — imperfect but improving over time.

For the business tracking use case, the Find My network is arguably more privacy-preserving than the alternatives. GPS trackers often send location to third-party platforms without strong privacy guarantees. Cellular trackers involve additional carrier data retention. The Find My model's end-to-end encryption is a favorable comparison for location data handling.

Practical disclosure language for business AirTag tracking

For rental agreements, something like: "Rental equipment may be equipped with an Apple AirTag or similar tracking device for location, theft prevention, and recovery purposes. The tracking device records equipment location only and does not transmit any customer personal information, device usage, or other data."

For employee-issued equipment, similar language in the device issuance agreement or IT policy: "Company-issued equipment may be equipped with a location tracking device. Tracking records the physical location of the equipment and is used for asset management, inventory, and recovery purposes. No content, communications, or personal data are collected by the tracking device."

Clear disclosure up front reduces friction when anti-stalking alerts inevitably arrive, and is good practice for ethical tracking regardless of what the law requires.