location privacy concerns. Location conveys a rich set of potentially private contextual information. Even if devices are only identified by pseudonymous addresses, an adversary could learn the user’s identity if the location is linkable to publicly available, identified location records. For example, if a query originates from a car on a suburban driveway, the likely household could be identified by looking at a public address database. The location architecture should incorporate privacy
mechanisms across all layers to address location privacy concerns.