The Fourth Amendment’s protections for cell phones and location data require police to get a warrant before searching your phone’s contents, before pulling a week or more of your historical location records from a wireless carrier, and before tracking your movements in real time. Those are the settled rules. Around them sits a wider set of unresolved questions — border searches, compelled biometric unlocking, geofence warrants, and government purchases of commercial location data — where your protections depend on which court you’re in and which agency is asking.
Searching the Phone Itself
If you’re arrested, officers can pat you down and empty your pockets. They cannot scroll through your phone. In Riley v. California, a unanimous Supreme Court held that police generally need a warrant before accessing the digital contents of a phone seized during an arrest.1Justia. Riley v. California, 573 U.S. 373 (2014) Neither of the traditional justifications for a search incident to arrest — officer safety and preventing destruction of evidence — fit a device that poses no physical threat and can be shielded from remote wiping while a warrant is sought. And the intrusion is enormous: a modern phone holds years of messages, browsing history, medical and financial records, and photos.
The Riley rule has exceptions. The Court preserved exigent circumstances, so officers can search a phone without a warrant during a genuine emergency such as an active kidnapping or an imminent threat to life.1Justia. Riley v. California, 573 U.S. 373 (2014) Those situations are rare. In ordinary arrests, warrantless phone searches produce evidence that defense attorneys can move to suppress.
Consent and Its Limits
A warrant is not the only lawful way in. If you voluntarily consent, the search is constitutional regardless of probable cause. You can say no. You can also limit what you agree to: telling an officer they can look at your text messages does not authorize them to open your photos or your banking app. Any limitation you place on consent defines the search’s boundary.
You can withdraw consent once a search has started, but you must do so clearly. Complaining that the search is taking too long doesn’t qualify. A direct statement like “I’m withdrawing my consent, please stop” does. After withdrawal, anything the officer finds is likely inadmissible. One catch: you cannot withdraw consent after incriminating evidence has already been discovered.
Historical Location Records From Cell Towers
Your phone connects to nearby cell towers constantly, and wireless carriers log those connections. Over weeks and months, that cell-site location information maps everywhere you’ve been. In Carpenter v. United States, the Supreme Court held that acquiring this kind of historical location data is a Fourth Amendment search, and the government generally needs a warrant supported by probable cause to obtain it.2Legal Information Institute. Carpenter v. United States
The Court specifically held that seven days of records qualifies as a search. It deliberately declined to draw a bright-line minimum, so requests for two or three days sit in unsettled territory.3Supreme Court of the United States. Carpenter v. United States, No. 16-402 (2018) What is clear: a week or more of your location history requires a judge’s approval. Because people carry their phones almost everywhere, these records reveal visits to doctors, political meetings, places of worship, and private homes.
Before Carpenter, the government argued no warrant was needed under the third-party doctrine, which holds that information you voluntarily share with a company loses constitutional protection.4Justia. Smith v. Maryland, 442 U.S. 735 (1979) The Court rejected that logic for cell-site data. You don’t actively choose to transmit your coordinates every time you receive a call or text. The data is generated automatically and comprehensively, which makes it fundamentally different from voluntarily dialing a phone number.
Tower Dumps Remain Open
A tower dump reverses the Carpenter-style request: instead of pulling one person’s history, investigators ask a carrier for every device that connected to a particular tower during a specific window, often just a few hours around a crime. The Carpenter Court explicitly declined to address whether tower dumps trigger Fourth Amendment protection, and lower courts have reached inconsistent results. Most pre-Carpenter decisions found no reasonable expectation of privacy in tower dump data. Post-Carpenter courts have largely avoided reaching the merits. The question is open.
Real-Time Tracking and GPS Surveillance
Tracking someone’s movements as they happen is a different intrusion from reviewing historical records. In United States v. Jones, the Supreme Court held that attaching a GPS device to a suspect’s vehicle and monitoring its movements is a Fourth Amendment search.5Legal Information Institute. United States v. Jones That decision focused on the physical act of placing the tracker, but several justices wrote separately to argue that long-term electronic monitoring violates reasonable expectations of privacy even without a physical trespass. That reasoning later influenced Carpenter.
Law enforcement also tracks phones in real time by pinging the device or by using cell-site simulators, often called Stingrays. A Stingray mimics a legitimate cell tower, causing nearby phones to connect and reveal their identifiers and locations. Because this technology can pinpoint a phone’s position inside a private residence, courts generally require a warrant. Pinging a phone to force it to report its GPS coordinates is treated the same way.
When investigators obtain a warrant for real-time tracking with a device like a GPS tracker, Federal Rule of Criminal Procedure 41 limits the surveillance to 45 days. A court can grant extensions for good cause, and each extension is also capped at 45 days.6Legal Information Institute. Federal Rules of Criminal Procedure – Rule 41, Search and Seizure The cap forces investigators to periodically justify continued tracking to a judge.
Emergency Disclosures
Real-time tracking can happen without a warrant when genuine emergencies arise. Under 18 U.S.C. § 2702, a service provider may disclose customer records to the government if it believes in good faith that an emergency involving danger of death or serious physical injury requires immediate disclosure.7Office of the Law Revision Counsel. 18 U.S.C. 2702 – Voluntary Disclosure of Customer Communications or Records Courts have applied this to situations like locating a child being sexually exploited or tracking a suspect believed to be causing imminent harm. The exception is narrow. An officer who tracks a phone without a warrant and without an articulable emergency risks having the evidence suppressed.
Geofence Warrants and Reverse Keyword Searches
Traditional warrants start with a known suspect. Geofence and reverse keyword warrants work backward, starting with a crime’s location or a suspicious search term and asking a tech company to identify every user who was nearby or who typed a particular query.
A geofence warrant compels a company to identify every smartphone present within a defined geographic area during a specified window. Investigators typically sent these to Google, which until recently maintained a massive location database called Sensorvault. The Fifth Circuit held in United States v. Smith (2024) that geofence warrants can function as the kind of general warrants the Fourth Amendment was designed to prevent, because executing one requires searching the provider’s entire database of hundreds of millions of accounts to find a small subset of relevant data.8Congressional Research Service. Geofence and Keyword Searches – Reverse Warrants and the Fourth Amendment
The Supreme Court granted certiorari in Chatrie v. United States (No. 25-112) in January 2026 to consider whether geofence warrants violate the Fourth Amendment.9Supreme Court of the United States. Chatrie v. United States, No. 25-112 – Question Presented A ruling is expected to provide the first definitive guidance. In the meantime, Google has moved user location data off its central servers and onto individual devices, so the company can no longer respond to geofence warrants the way it once did. Law enforcement now needs to identify a specific person and gain access to their phone to retrieve location history.
Reverse keyword warrants take a similar approach with search queries. If someone was murdered at a specific address, investigators might compel Google to identify every user who searched for that address in the days before the killing. The law here is thin. The Colorado Supreme Court found that a keyword warrant was a search under the state constitution but not an unconstitutional general warrant, because the specific search parameters acted as a meaningful filter. The Pennsylvania Supreme Court concluded that users have no reasonable expectation of privacy in general internet search queries, applying the third-party doctrine to data voluntarily entered into a search engine.8Congressional Research Service. Geofence and Keyword Searches – Reverse Warrants and the Fourth Amendment As of early 2026, Utah is the only state to have enacted legislation restricting keyword warrants.
Cloud Storage, Email, and Metadata
Much of what you generate every day sits on someone else’s server. The Stored Communications Act (18 U.S.C. Chapter 121) sets the rules for how the government accesses emails, cloud files, and other digital content held by service providers.10Office of the Law Revision Counsel. 18 U.S.C. Chapter 121 – Stored Wire and Electronic Communications and Transactional Records Access The statute draws a line between content and metadata. Content stored for 180 days or less requires a warrant. For content stored longer than 180 days, the statute technically allows access through a subpoena or court order with prior notice to the subscriber, though in practice the Department of Justice has adopted a policy of seeking warrants for all stored content regardless of age.11Office of the Law Revision Counsel. 18 U.S.C. 2703 – Required Disclosure of Customer Communications or Records
Non-content records — subscriber information, email headers, timestamps, file sizes — can be obtained through a court order, or for basic subscriber data, an administrative subpoena. Defense attorneys frequently argue that aggregated metadata can be just as revealing as content, because who you contact, how often, and when maps your relationships and daily patterns. The legal threshold for metadata access remains lower than for content.
The Data Broker Loophole
When the government can’t compel a company to hand over data, it sometimes buys it. No federal law currently prohibits government agencies from purchasing sensitive personal data, including location information, from commercial data brokers. The Electronic Communications Privacy Act bars phone and internet companies from selling customer data directly to the government, but data brokers sit outside that prohibition. Companies sell to a broker, and the broker sells to an agency, bypassing the warrant requirement.
The Fourth Amendment Is Not For Sale Act, which passed the House in 2024, would close this gap by prohibiting law enforcement and intelligence agencies from purchasing geolocation data, communications-related data, and information obtained through unauthorized scraping.12Congress.gov. H.R.4639 – Fourth Amendment Is Not For Sale Act As of 2026, the bill has not become law.
At the Border
The warrant requirement effectively disappears when you cross an international border. Under the border search doctrine, customs officers have broad authority to inspect travelers and their belongings without a warrant or probable cause. How far that authority extends into electronic devices is contested.
Customs and Border Protection distinguishes between basic and advanced device searches. A basic search involves an officer manually reviewing your phone without connecting it to external equipment. An advanced search involves plugging the device into forensic tools to copy or analyze its data. CBP policy requires that advanced searches be based on reasonable suspicion of a legal violation or a national security concern, and they require approval from a supervisor at the GS-14 level or higher.13U.S. Department of Homeland Security. Border Searches of Electronic Devices at Ports of Entry (FY 2023 Report to Congress)
Federal courts are split on whether the Constitution requires that distinction. The Fourth and Ninth Circuits have held that forensic border searches are non-routine and require individualized suspicion. The Eleventh Circuit has ruled that no suspicion is required even for forensic searches. If you’re traveling internationally, a basic manual review can happen to anyone. A deeper forensic analysis depends on both agency policy and the circuit you’re in.
Compelled Biometric Unlocking
A warrant to search your phone doesn’t help investigators much if they can’t get past the lock screen. The Fifth Amendment protects you from being compelled to provide testimony that incriminates you. Disclosing a passcode is generally treated as testimonial because it requires you to reveal something from your mind, like a safe’s combination. Biometric unlocking is where courts disagree.
In United States v. Payne (Ninth Circuit, 2025), the court held that pressing a thumb to a phone sensor is a physical act similar to providing a blood sample, requires no mental effort, and is therefore non-testimonial and unprotected by the Fifth Amendment. The D.C. Circuit reached the opposite conclusion in United States v. Brown (2025), ruling that compelling a suspect to use a thumbprint to unlock a phone violated the privilege against self-incrimination because the act communicates knowledge about who owns the phone, how it can be accessed, and which finger serves as the password. Your right to refuse a compelled biometric unlock depends entirely on where you are. The Supreme Court has not weighed in.
Why Defective Warrants Still Yield Admissible Evidence
Even when a warrant is constitutionally defective, the evidence obtained under it doesn’t always get thrown out. Under the good faith exception established in United States v. Leon, evidence is admissible if officers reasonably relied on a warrant issued by a neutral judge, even if that warrant is later found invalid.14Justia. United States v. Leon, 468 U.S. 897 (1984) This exception has played a major role in geofence cases. In Chatrie, the Fourth Circuit declined to suppress geofence evidence because the officers acted in reasonable reliance on a warrant, even though the court’s opinions were divided on whether the underlying search was constitutional.8Congressional Research Service. Geofence and Keyword Searches – Reverse Warrants and the Fourth Amendment
The exception has limits. It doesn’t apply when an officer misled the judge with false information in the warrant application, when the judge abandoned neutrality, when the affidavit was so lacking in probable cause that no reasonable officer could have relied on it, or when the warrant itself failed to describe what was being searched or seized. If you’re challenging digital surveillance in court, the good faith exception is often the real fight. Showing the warrant was defective is only half the work. You also need to show that no reasonable officer would have relied on it.