Kochava is a mobile attribution and data-marketplace company, Kochava Inc., a private company headquartered in Sandpoint, Idaho. Its own privacy/compliance page describes its core measurement product as an SDK embedded in client apps that collects mobile device identifiers and IP addresses (treated as personal information under GDPR) and states it does not itself collect direct identifiers like email or name, while also describing an annual independent third-party GDPR/ISO 27001 audit. Separately, the FTC sued Kochava in August 2022 as a 'data broker' for purchasing and selling geolocation data from hundreds of millions of mobile devices in customized feeds pairing device IDs with timestamped lat/long, alleging this data could expose visits to reproductive health clinics, places of worship, and shelters. In May 2026 the FTC announced a proposed final settlement order banning Kochava and its subsidiary Collective Data Solutions (CDS) — which the FTC states has taken over Kochava's data-broker business — from selling sensitive location data without affirmative express consumer consent, approved 2-0 by the Commission.
TRACK RECORD
1 ENFORCEMENT ACTION
[2026-05-04]
The FTC announced on May 4, 2026 that it will finalize a settlement order — approved 2-0 by the Commission and filed in the U.S. District Court for the District of Idaho — permanently prohibiting Kochava and CDS from selling, sharing or disclosing sensitive location data without consumers' affirmative express consent, resolving the FTC's August 2022 lawsuit alleging Kochava sold geolocation data revealing visits to reproductive health clinics, places of worship, and domestic-violence shelters.
Kochava's own privacy/compliance page states its measurement SDK, embedded in client apps, collects data the client customizes for its needs, and that Kochava has 'engineered its systems to not collect identifying information such as email, name, and phone number' — while acknowledging that under GDPR, mobile device identifiers and IP addresses it does collect are considered personal information.
The FTC's August 2022 complaint alleges that, separate from its client-SDK measurement business, Idaho-based Kochava purchases vast troves of third-party location information derived from hundreds of millions of mobile devices for its data-broker product line.
Kochava's own company page states the company is headquartered in Sandpoint, Idaho, describing itself as choosing to grow its engineering and development infrastructure there while maintaining sales and agency representation in major markets worldwide.
The FTC's May 2026 settlement press release identifies Kochava's corporate structure for its data-broker line of business, naming a subsidiary, Collective Data Solutions (CDS), that has taken over that business from Kochava.
The FTC's 2022 press release states it sued Kochava as a 'data broker' for selling geolocation data from hundreds of millions of mobile devices that could be used to trace individuals' movements to and from sensitive locations such as reproductive health clinics and places of worship.
Separately from the FTC action, Kochava's own compliance page states the company is audited annually by an independent third party against GDPR and ISO/IEC 27001:2013 information-security standards — a recurring audit artifact, though the auditing firm is not named on the page.
The FTC announced on May 4, 2026 that it will finalize a settlement order — approved 2-0 by the Commission and filed in the U.S. District Court for the District of Idaho — permanently prohibiting Kochava and CDS from selling, sharing or disclosing sensitive location data without consumers' affirmative express consent, resolving the FTC's August 2022 lawsuit alleging Kochava sold geolocation data revealing visits to reproductive health clinics, places of worship, and domestic-violence shelters.
The FTC's 2022 complaint describes Kochava's data feeds as pairing persistent mobile device identification numbers with timestamped latitude/longitude coordinates, allowing purchasers to trace individual devices' movements over time.