The operating systems of many smartphones and tablets include specific features for managing health, fitness, and location data. This personal data represents an attractive target for attack and is particularly sensitive, especially if it is collected and stored over a longer period of time. For this to occur, such functions must first be activated by the user.

This can make it possible to identify an employee's location (for example) by attacking their device or the cloud services connected to it. In addition to the data protection implications, this can lead to further attacks under certain circumstances. Compromised location data could reveal that an employee is travelling on business, for instance, and expose their home to a break-in.