The Architecture of Digital Stalking

We built an entire global infrastructure for locating lost keys and making sure teenagers don't miss curfew, and we basically handed the controls directly to domestic abusers.

The actual infrastructure of stalking

It's not a glitch in the system. The continuous background location polling of apps like Life360 or Apple’s Find My ecosystem is functioning exactly as engineered. They broadcast real-time GPS coordinates, log location history, and push notifications when a device leaves a geofenced zone. And abusers just co-opt this. They don't need to be elite hackers; they just demand you share your location. Then you have the sideloaded garbage—unofficial parental control apps that bypass store regulations, grab excessive hardware permissions, and pipe unencrypted location data to some random server.

It is a massive vulnerability disguised as a safety feature.

The hardware side is even worse. Bluetooth trackers like AirTags are brilliant from a pure network topology standpoint. You don't need a cellular modem or a battery-draining GPS module in the tag itself. You just drop a coin-sized node into a target's car, and the vast, crowdsourced mesh network of passing phones silently does the heavy lifting, routing the ping back to the abuser. The architecture is incredibly efficient. Which is fine if we are talking about finding a misplaced backpack but it completely breaks down when you apply it to a human being trying to escape a violent situation.

People think this level of visibility is normal now. Kids grow up with their parents tracking their phones, so when a partner demands to see their live location on a map, they just assume it's how you show you care. It’s not care. It's the total erasure of physical boundaries, and the hypervigilance it induces physically destroys people. They stop going places. They self-isolate because every movement triggers an interrogation.

State mechanics and broken perimeters

Look at how the Turkish state is trying to handle the fallout. From a purely administrative standpoint, the KADES application is decent infrastructure. A woman in danger hits a button, the app pulls her GPS coordinates, and a police patrol is dispatched automatically. No operator delays, no explaining the situation while someone is kicking down a door. But it's entirely reactive. You only press it when the physical threat is already in the room.

A much better architectural approach to state security is the GAMER electronic monitoring system.

Instead of putting the burden of defense on the victim, the state slaps a GPS-enabled ankle monitor on high-risk abusers. They draw a digital geofence. If the abuser breaches the perimeter, the central hub gets the alert directly. The state manages the threat and deploys police to intercept. This is how you actually protect citizens—you restrict the mobility of the threat rather than telling the victim to just stay offline.

They also updated the penal code. TCK 123/A finally made persistent stalking a distinct crime, and they specifically wrote "information technology systems" into the text. This matters. Before this, cops didn't know how to charge someone for dropping a tracker in a purse. Now it's codified. And crucially, they blocked this crime from entering judicial conciliation. You don't force a victim to sit at a mediation table with a person who has been quietly logging their geographic coordinates for months. You prosecute them.

The "consent" loophole

But a law is just text on paper if the digital ecosystem fundamentally supports the crime.

Apple and Google finally panicked over the bad PR and pushed out cross-platform alerts for hidden trackers. If an unknown Bluetooth tag is moving with you, your phone warns you. It’s a duct-tape solution patched over a broken foundation. Alerting a victim that they are being tracked doesn't neutralize the person tracking them. In fact, if an abuser realizes their node has been found, things usually escalate to physical violence immediately.

The core failure in their threat modeling is that algorithms cannot parse coerced consent. If an abuser threatens you until you install a family locator app and share your location indefinitely, the operating system assumes you opted in. No warning fires. The system thinks everything is operating perfectly.