Active Incident? 24/7 Response →
SleuthX

Family Office Notes

Is the Principal Being Tracked? AirTags, Jet/Yacht Tracking & Geotags

A principal's location often leaks in public, no spyware required — from a tag in a bag to a tail number on a flight tracker. Here is how to find and close each gap.

All articles·9 min read·June 22, 2026

Location leaks in public, not just on phones

When people worry about being tracked, they picture spyware on a phone. For a principal, the more common exposure is simpler and more public: a small tag slipped into a bag, a jet's transponder on a free flight tracker, a yacht broadcasting its position, or coordinates baked into a posted photo. This is a high-net-worth angle on tracking, distinct from the consumer-device walkthrough in how to detect AirTag stalking— here the leakage paths are jets, yachts, and travel patterns as much as gadgets. This is general information, not legal advice, and not a substitute for a professional sweep or a tailored assessment.

Hidden trackers

Consumer Bluetooth tags are cheap, tiny, and easy to plant in a vehicle, a handbag, or a piece of luggage. Modern phones can help: Apple publishes guidance on the alerts that fire when an unknown AirTag or Find My accessory is traveling with you, and equivalent cross-platform detection now exists following the industry unwanted-tracking standard. A manual scan plus a physical check of frequently used bags and cars catches most of what software misses.

The jet

A private aircraft is one of the most reliable ways to know where a principal is, because flight data is broadcast and aggregated publicly. The FAA's Limiting Aircraft Data Displayed (LADD) program lets an owner ask participating vendors to stop displaying their tail number, and the FAA's ADS-B privacy options address the underlying transponder data. One caveat worth understanding: LADD limits what online trackers show, but it does not stop someone receiving raw ADS-B signals near the aircraft — so it reduces the casual public trail rather than eliminating all detection.

The yacht

Vessels transmit position over the Automatic Identification System (AIS) for collision avoidance, and that signal is aggregated on public maritime trackers. Because AIS exists for safety, it is harder to suppress than aircraft data; the practical mitigations are operational and best handled with the vessel's captain and security adviser rather than assumed away.

Photos and travel patterns

A single image can reveal the exact coordinates where it was taken. The NSA's location-exposure guidance, published through CISA, calls out photo metadata directly — strip geotags and disable location tagging. Beyond any one photo, predictable patterns — the same posts from the same places at the same times — quietly map a principal's movements; introducing a delay before sharing is a small habit with an outsized effect.

A calm way to check

Most engagements begin with a quiet sweep of the realistic leakage paths — devices, vehicles, the aircraft and vessel trail, and the family's public posting habits — and a short list of fixes. The reassuring part is that most location exposure is closeable with deliberate steps; the goal is to make the principal hard to follow, not impossible to find.

Sources

  1. Apple, If you get an alert that an AirTag, Find My accessory, or set of AirPods is with you. https://support.apple.com/en-us/119874
  2. Federal Aviation Administration, Limiting Aircraft Data Displayed (LADD). https://www.faa.gov/pilots/ladd
  3. Federal Aviation Administration, ADS-B Privacy. https://www.faa.gov/air_traffic/technology/equipadsb/privacy
  4. Cybersecurity and Infrastructure Security Agency (CISA) / National Security Agency, NSA Releases Guidance on Limiting Location Data Exposure. https://www.cisa.gov/news-events/alerts/2020/08/06/nsa-releases-guidance-limiting-location-data-exposure

Related services

Meet Your Practitioner

Quinnlan Varcoe

Founder & CEO

GIAC-certified · 15 industry certifications

With operational experience across Fortune 50 security programs and the defense industrial base, Quinnlan founded SleuthX in 2022 to provide clients with the caliber of expertise typically reserved for the largest enterprises. Her work in threat intelligence and digital forensics has earned the trust of 26,000+ cybersecurity professionals who follow her analysis.

“26,000 professionals follow my work because I say what others won't — and I can back it up technically.”

Fortune 50 BackgroundDefense IndustryThreat IntelligenceDigital PrivacyIncident Response
Quinnlan Varcoe, Founder & CEO

Is the principal being tracked: quick answers

Certified Expertise

GIAC · AWS · Splunk · CompTIA

Transparent pricing

Trusted by partners across the practice

DAS Health
Exhibit A Cyber
Ally Security
KIRO Group
Black Mirage
Kalles Group
Gridware
CQR
Archstone Security
Cyvergence
Sentinel Cyber
Cloud Underground
Seron Security
Hexen
Koru Risk Management
DAS Health
Exhibit A Cyber
Ally Security
KIRO Group
Black Mirage
Kalles Group
Gridware
CQR
Archstone Security
Cyvergence
Sentinel Cyber
Cloud Underground
Seron Security
Hexen
Koru Risk Management