A weather app developer makes approximately $4.37 every time they sell a complete behavioral profile to a data broker. The profile includes your location history, app usage patterns, search queries, purchase behavior, and demographic inferences. The transaction takes about 90 milliseconds. You get nothing.
This is not about apps “sharing” data with partners or “improving services.” This is a direct financial transaction. Apps collect behavioral data, package it into standardized profiles, and sell it to intermediaries who resell it to anyone willing to pay. The entire system runs on the assumption that you will never find out the exact dollar amount your digital life is worth.
The actual mechanics of a data sale
When an app sells your data, it does not negotiate individual deals. It connects to a data broker platform like Acxiom, Oracle BlueKai, or Epsilon. These platforms operate real-time bidding systems similar to ad exchanges, except the product is not ad impressions. It is you.
Here is what a typical transaction looks like. A navigation app collects 14 days of your location data. It anonymizes your name but keeps your device ID, zip code, movement patterns, and the times you visit specific locations. The app sends this bundle to a broker platform. Within seconds, the broker matches your device ID with purchased data from other sources (credit card transactions, loyalty programs, public records). Now they have a profile worth selling.
The broker assigns you a category. “High-income urban commuter who visits gyms and coffee shops.” This category sells for more than “Low-income suburban parent who visits discount stores.” Different profiles have different market values. Apps know this, which is why free apps often request permissions that seem unrelated to their function. They are optimizing for profile completeness, not user experience.
The $4.37 figure is an average. A complete profile with fresh location data, purchase history, and device identifiers can sell for $8 to $12. A sparse profile with just demographic guesses might fetch $0.80. The price fluctuates based on how specific the targeting can be and how recent the data is.
Who actually buys this
Data brokers resell profiles to several types of buyers. Advertisers are the obvious ones, but they represent less than half of the market. Insurance companies buy profiles to assess risk. Landlords buy profiles to screen tenants. Employers buy profiles during hiring. Political campaigns buy profiles to target messaging. Financial institutions buy profiles to adjust credit offers.
The most profitable customers are hedge funds and private equity firms. They buy aggregated behavioral data to predict market movements. If 10,000 users suddenly start visiting car dealerships in a specific metro area, that signals increased auto sales before official numbers are released. If grocery app data shows increased purchases of premium brands, that predicts consumer confidence shifts. This market intelligence is worth far more than advertising targeting.
Some of this is legal. Some of it exists in regulatory gray zones. Almost none of it requires your explicit consent because the data is “anonymized” (though re-identification is trivially easy with enough data points). The apps are not lying when they say they do not sell “personally identifiable information.” They just sell everything else.
The consent theater
Apps claim you agreed to this when you tapped “Accept” on their privacy policy. Most privacy policies do disclose data sales, buried somewhere between paragraphs 8 and 14, phrased as “sharing with trusted partners” or “working with service providers to improve our offerings.” The language is deliberately vague.
Even when apps offer opt-out mechanisms, the process is designed to fail. You have to navigate five submenus, create an account on a third-party preference center, verify your email, and submit individual opt-out requests for each of 47 partner companies. By the time you finish, the app has already sold three more data snapshots.
California’s privacy law theoretically gives users control, but compliance is optional for apps without a California headquarters. Most apps simply add a line saying “California residents have additional rights under CCPA” without implementing functional controls. The regulatory enforcement budget is $10 million per year to police an industry generating $200 billion in revenue.
What this means for how you choose apps
Every time you install a free app, you are entering an implicit transaction. The app provides a service, you provide data worth several dollars per month. This is not inherently wrong, but the terms are deliberately obscured. The app never tells you that it will generate $50 from your profile over the next year, or that your location data will be sold to a dozen companies you have never heard of.
The alternative is not to delete all apps and move to a cave. It is to recognize the transaction and decide whether it is worth it. Some apps justify the exchange. Most do not. A flashlight app that sells your data is extracting value without providing equivalent utility. A navigation app that sells your commute patterns might still be worth using if you need turn-by-turn directions, but you should know the price.
Paid apps eliminate this dynamic, but only if they commit to no data collection beyond what is necessary for function. A $3 app that still sells your data is just double-dipping. Check the privacy policy or use a scanner to see what the app actually does with your information.
The surveillance economy relies on you never asking what your data is worth. Now you know the number. It is $4.37 on average, sometimes more, paid to the app developer, and you never see a cent.