Outlogic (formerly X-Mode Social, Inc.) is a location-data broker acquired by Digital Envoy, Inc. in August 2021 and operated as Outlogic LLC, a Virginia company. Its own privacy notice describes an SDK embedded in third-party publisher apps that collects precise geolocation (GPS, WiFi, cell-tower triangulation), dwell time, and proximity signals from Bluetooth beacons, NFC and IoT devices, and its CCPA disclosures and Texas data-broker notice state that geolocation and other identifiers are sold to advertising networks, data aggregators/resellers, financial institutions and government entities, naming roughly two dozen trusted partners (Azira, Unacast, Digital Element, and others). In January 2024 the FTC charged X-Mode/Outlogic with selling precise location data, including from sensitive locations such as health clinics and places of worship, without adequate safeguards; the FTC finalized a settlement order in April 2024 banning the sale of sensitive location data and imposing supplier-vetting and deletion requirements. No independent security audit, transparency report, or additional regulator action beyond the FTC order was found in this research.
TRACK RECORD
1 ENFORCEMENT ACTION
[2024-04-12]
The FTC states it finalized an order in April 2024 prohibiting data broker X-Mode and its successor Outlogic from sharing or selling any sensitive location data, following a January 2024 complaint that the company sold precise location data usable to track visits to sensitive locations (medical/reproductive health clinics, places of worship) and had failed until May 2023 to remove sensitive locations from the raw data it sold or implement reasonable safeguards against downstream misuse.
Outlogic's privacy notice states its SDK, which publisher apps integrate to monetize their content, collects precise geolocation (latitude/longitude via GPS, WiFi and cell-tower triangulation), dwell time at points of interest, and relative-location signals from Bluetooth Low-Energy beacons, IoT devices and NFC — collected whenever a user grants location/advertising-ID access to any app that has integrated the SDK, not only Outlogic's own apps.
Outlogic's own privacy notice identifies its operating entity as 'OUTLOGIC LLC a Virginia company', naming the specific legal entity responsible for the data-broker business (rebranded from X-Mode Social, Inc. after Digital Envoy's 2021 acquisition).
Digital Envoy, Inc.'s own company page states it acquired X-Mode Social, Inc. in August 2021 and rebranded the company as Outlogic, positioning Outlogic as a source of consent-based location data for Digital Envoy's fraud-prevention, VPN/IP-proxy and digital-rights-management products.
Outlogic's privacy notice's CCPA disclosure table marks 'Geolocation Information (lat/long coordinates, generally associated with a mobile identifier)' as sold in the past 12 months, with recipient categories listed as advertising networks, agencies and advertisers, data aggregators and resellers, data analytics services, financial institutions, government entities and information services, and Outlogic affiliates.
Outlogic's Trusted Partners page carries a notice required under Texas data-broker law stating the company may sell sensitive personal data, specifically precise geolocation coordinates, and separately lists roughly two dozen named recipient companies (including Azira, Unacast and Digital Element) as 'Trusted Partners' with whom EEA end-user data may be shared; Outlogic's CCPA disclosure table separately marks geolocation information as 'sold' in the past 12 months to advertising networks, data aggregators/resellers, financial institutions and government entities.
The FTC states it finalized an order in April 2024 prohibiting data broker X-Mode and its successor Outlogic from sharing or selling any sensitive location data, following a January 2024 complaint that the company sold precise location data usable to track visits to sensitive locations (medical/reproductive health clinics, places of worship) and had failed until May 2023 to remove sensitive locations from the raw data it sold or implement reasonable safeguards against downstream misuse.
The same privacy notice states the SDK is capable of receiving proximity signals from Bluetooth beacons, NFC and IoT devices, giving the example of brick-and-mortar stores using beacons to sense when a Bluetooth-enabled device enters the store — a cross-context, physical-world tracking stack disclosed in the operator's own policy.