It's the question that ends a call before it starts. An investigator hears what geolocation intelligence can do, sees the case it could crack, and then pulls back: isn't this the thing the Supreme Court said you need a warrant for?
The hesitation is reasonable. The conclusion is usually wrong — and it almost always rests on a misreading of one case. So let's walk the actual terrain, because knowing where you stand is the difference between leaving a case unsolved and working it cleanly.
What Carpenter actually said
In Carpenter v. United States (2018), the Supreme Court held that when the government wants to obtain a person's historical cell-site location records from their wireless carrier, that's a Fourth Amendment search — and it generally needs a warrant.
Read that sentence again, because every word in bold is doing work. Carpenter is about the government. It's about records held by a carrier. And it's about the Fourth Amendment, which is a restraint on government conduct — not a general privacy statute that governs everyone.
That's the part that gets lost. The Fourth Amendment limits what the state can do. It does not, on its own, regulate what a private citizen, a business, or a licensed investigator does. This is the state-action doctrine, and it's foundational. When you're working a civil case for a client, you are not the government, and Carpenter's warrant requirement isn't pointed at you.
There's one honest caveat worth stating plainly: a private investigator can lose that footing if they're effectively operating as an arm of law enforcement — acting at the direction of, or in concert with, the police on a criminal matter. In that posture, courts can treat you as a government agent, and the analysis changes. Working a case for an agency under their direction is different from working a civil matter for a private client. Know which one you're in.
Two different things wearing the same name
The second misunderstanding is about the data itself. Carpenter dealt with cell-site location information compelled from a carrier — records the phone company keeps about which towers your phone connected to.
Commercial geolocation intelligence is a different animal. It's built from mobile advertising identifiers and GPS signals that apps collect and transmit through the advertising ecosystem — the same machinery that lets a free app show you a nearby coffee shop. It flows through the commercial data marketplace. It is not compelled from a carrier, not pulled off a device, and not obtained through any legal process aimed at the subject.
So the common objection — "but Carpenter says you need a warrant" — collapses two separate things: the government compelling carrier records, and a private party analyzing commercially available signal data. They are not the same act, and they don't live under the same rule.
The rules that do apply
None of this means the space is a free-for-all. It isn't — and an investigator who thinks "not the Fourth Amendment" means "no limits" is the one who gets into trouble. The real constraints just live somewhere other than where people expect.
This is a regulated, actively scrutinized field. The Federal Trade Commission has spent years going after location-data brokers — InMarket, X-Mode, Gravy Analytics, Mobilewalla, and Kochava among them — and the through-line of every one of those actions is the same: selling sensitive-location data without consumers' affirmative consent. That enforcement is aimed at the supply chain, and it's tightening it, pushing consent verification upstream. It doesn't make location intelligence unlawful for a licensed investigator with a legitimate purpose — but it tells you exactly where the legal and ethical fault lines are.
Then there's the rest of the terrain a working PI already navigates:
- Permissible purpose. This is the real gate. Financial data carries Gramm-Leach-Bliley obligations. Pulling information to make employment, tenant, or credit decisions can trigger the Fair Credit Reporting Act. The question is never just "can I get this data" — it's "do I have a lawful reason to."
- Anti-stalking and electronic-tracking laws. Many states criminalize secretly attaching a GPS tracker to someone's vehicle. That's a physical act distinct from analyzing commercial signal data, but it lives in the same neighborhood of the law, and the intent behind a search matters.
- State privacy and data-broker law. The state privacy acts and data-broker registration regimes are multiplying. What's permitted in one jurisdiction may be restricted in another, and the map is being redrawn every legislative session.
- Your license. A licensed investigator already operates under a permissible-use framework. That license is an asset here — it's the documented, accountable predicate the unlicensed data buyer doesn't have.
How to stand on solid ground
The governing question for an investigator isn't do I have a warrant. It's do I have a permissible purpose, a documented predicate, and a use that stays inside the rules. Get those right and the work is clean. Get them wrong and the data source was never your problem — your purpose was.
In practice, that means a few non-negotiables. Every engagement starts with a documented lawful basis — civil litigation, subpoena service, a missing person, attorney direction, law-enforcement support — and the requests without one get declined. The work anchors on geography, device patterns, and time, not on identifiers fed in to satisfy curiosity. And it never gets pointed at the sensitive locations the regulators are protecting — someone's health, faith, or politics is not a legitimate target, and treating it as one is both an ethics failure and a legal one.
That discipline isn't a constraint on the work. It's what makes the work hold up — in front of a client, opposing counsel, or a court.
One note, because it matters: this is general information, not legal advice, and I'm not your lawyer. Privacy law varies by state and is changing fast. Before you build a practice around any of this, confirm your footing with your own counsel and know the rules in your jurisdiction.