Preventing Digital Tracking: When Software Is Not Enough

TOCA · KNOWLEDGE

By TOCA Editorial · 2026 · 6 min read

VPN, disabling ad IDs, turning off location services. Most advice on preventing tracking focuses on software. That makes sense. But there are situations where software alone is not enough, because the signal itself is the problem.

Anyone who wants real control over when their device is visible needs to understand the difference between digital and physical tracking, and where the boundary between the two lies.

"If you want to make your device truly invisible, you have to cut the signal — not just close the app."

Digital tracking: what software can solve

Digital tracking happens when apps, websites, or operating systems collect and share data about your usage, location, or identity. Typical examples: advertising IDs that link your behaviour across apps, location data transmitted to third parties in the background, or cookies that follow your sessions across websites.

Software measures work well against this kind of tracking. Disabling your ad ID, restricting app permissions, using a VPN, switching to a privacy-friendly browser. These tools are worthwhile and should be used.

But they all share one limitation: they assume the operating system is working correctly, that no security vulnerabilities exist, and that no hidden software has been installed. And they offer no protection against a different kind of tracking entirely.

Physical tracking: what only hardware can solve

Physical tracking means a device can be located or identified through its signal, regardless of what settings are configured on the device.

GPS. Your smartphone continuously receives satellite signals and calculates its position — even in airplane mode, even when location services are turned off. That data is stored internally and can be accessed by apps as soon as the device reconnects.

Mobile cell towers. Any device with an active SIM card regularly transmits a signal to the nearest cell tower. This cannot be disabled as long as the device is switched on and the SIM is active. Mobile network providers, and under certain conditions law enforcement authorities, can use this to determine the approximate location of a device.

RFID and NFC. Passports, bank cards, access cards, and other documents containing a chip passively emit a signal whenever they come into range of a reader.

"GPS cannot be switched off in settings. The signal stays active until reception is physically interrupted."

When does physical protection matter?

For most people in everyday life, digital tracking is the more relevant concern. Physical protection becomes important in specific contexts.

Confidential conversations and meetings. Anyone who needs to be certain that a device is neither actively nor passively collecting data during a conversation depends on physical shielding. A device inside a Faraday bag sends and receives no signals whatsoever.

Protection against stalking and digital abuse. Stalkerware and covertly installed tracking apps can transmit location data even with settings disabled. For those affected, a Faraday bag can be a simple physical measure that works independently of the device's software state.

Travelling with sensitive documents. Passports and identity documents with RFID chips can be identified contactlessly. An RFID-blocking sleeve prevents this during the moments when the document is not actively in use.

Keyless-Go protection. Car keys with a passive transmit signal can be exploited remotely through relay attacks. Physical signal blocking is the only effective countermeasure here.

"Physical protection works regardless of the device's software state. That is its decisive advantage."

Combining software and hardware

Physical and digital protection are not in competition. They complement each other. Understanding both layers allows you to make more deliberate decisions about which measure is appropriate and when.

For most people, being thoughtful about app permissions, ad IDs, and location services is sufficient in daily life. In situations that call for greater control, a Faraday bag is a simple physical addition that operates independently of software and operating system.

TOCA produces and designs signal-blocking sleeves and bags for smartphones, car keys, passports, and laptops. DEKRA certified. Designed in Germany. Built for everyday use. Discover all products.