Precise location data is among the most sensitive categories of personal information, and its collection — even with permission — creates risks if retained long-term or combined with other data to infer sensitive information such as health conditions or religious practices.
Consumer impact
Microsoft collects a broad range of personal data across Xbox and all its products, including voice data, precise location, gaming history, payment details, and behavioral inferences, which are shared across Microsoft's product family and used for advertising and AI model improvement. Minors using Xbox are subject to specific parental consent controls, but the breadth of data collection across interconnected Microsoft services means that even child accounts generate significant data profiles. You can review, download, and delete your personal data by visiting your Microsoft Privacy Dashboard at https://account.microsoft.com/privacy.
What you can do
⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
Delete Your Data
Log in to your Microsoft Privacy Dashboard, navigate to 'Location activity', review stored location data, and use the deletion tools to remove your location history. Also revoke location permissions for Microsoft apps in your device's system settings.
Applicable agencies
FTC
The FTC has enforcement authority over deceptive and unfair location data collection practices under FTC Act Section 5 and has taken significant enforcement actions in this area.
State AGs, particularly in Washington, California, and other states with location data privacy laws, have authority to enforce location data protections including the Washington My Health MY Data Act and CCPA/CPRA.