Surveillance
He Was At Work When Police Showed Up. Google Said He Was At A Murder Scene.
On the morning of December 13, 2018, four police officers walked into a Macy's warehouse in Goodyear, Arizona and told a 23-year-old warehouse worker named Jorge Molina he needed to come with them.
Molina was confused. He followed them out of the building, where he was handcuffed in front of his coworkers and loaded into a police vehicle.
He had no idea what was happening.
He was transported to Avondale city jail, where detectives interrogated him for several hours. They asked him about a white Honda. They asked him who had access to his Google account. Then they asked him whether he had murdered a man named Joseph Knight.
Molina was in shock.
He hadn't shot anybody. He didn't even know Joseph Knight.
But Google said he was there.
And that was enough to put him in jail.
What Actually Happened
Nine months earlier, on March 14, 2018, Joseph Knight was shot nine times outside his apartment in Avondale, Arizona.
Police had surveillance footage of the shooting. A white Honda slowed down near Knight's residence and someone fired from the driver's side window. The video was not clear enough to capture a license plate or identify the shooter.
With no witnesses and no clear physical evidence, investigators turned to Google.
They issued what is called a geofence warrant. This is a legal tool that compels Google to hand over location data for every device in a specified geographic area during a specified time window. Police drew a virtual boundary around the crime scene, set the time parameters to the night of the murder, and asked Google to produce a list of every Google account that was active in that area.
Google complied.
Four accounts came back.
One of them belonged to Jorge Molina.
Police then pulled his vehicle registration. He drove a white Honda. Combined with the Google location data, that was enough. Investigators issued a second warrant for Molina's Google search history. It showed he had searched the phrase "shootings in Avondale AZ last night" on the evening of the murder.
To detectives, the case looked airtight.
It wasn't.
The Detail That Unraveled Everything
What police had failed to adequately investigate was something Molina told them during his very first interrogation.
He had an old smartphone. He had given it to his stepfather, a man named Marcos Cruz Gaeta. The old device was still logged into Molina's Google account.
Gaeta was not just any stepfather. He had a history of violence. He had an active arrest warrant out of California. He regularly drove Molina's white Honda without permission. Police records showed he had previously been arrested while driving that exact car.
Molina's own mother and sister told investigators during a search of the family home that Gaeta was abusive, that he carried a weapon everywhere, and that he had been driving the Honda regularly.
Police had this information from the very beginning.
They arrested Molina anyway.
He spent six days in jail. Most of that time was in the high security Lower Buckeye facility, where he was held in his cell for 23 hours a day. His first call was to his mother.
"I had to stay strong for her," he said later. "I had to tell her, I'm good, it's okay, I'm going to get out."
He kept telling himself the same thing.
He is innocent. He will get out.
Six days later, he did. Prosecutors noted numerous inconsistencies in the Google data and released him without charge. The Avondale Police Department offered no apology and declined to publicly state they had arrested the wrong person.
The Fallout
Being released is not the same as being exonerated.
Molina's mugshot had been plastered across news outlets across Arizona. His name was attached to a murder arrest. Every time a potential employer searched his name, the stories appeared.
He lost his job at Macy's. He struggled to find new work because the arrest showed up in background checks. His reputation in his community was damaged in ways that a quiet release from jail could not repair.
"Every moment can be snatched from you, just like that, for something you never even did," Molina said.
He sued the city of Avondale and its police department for 1.5 million dollars, alleging defamation, gross negligence, and intentional infliction of emotional distress.
In March 2019, Marcos Cruz Gaeta was arrested by Riverside County law enforcement in California in connection with Joseph Knight's murder. He was also charged in connection with a separate 2016 homicide in Indio, California.
The man police had been told about from the very first interrogation was the actual perpetrator.
The Technology That Made It Possible
Most people have never heard of a geofence warrant. That is by design.
These warrants are typically sealed by a judge until after an arrest has been made. The person whose data was swept up may never know their information was accessed at all.
Here is how the process works.
Police identify a crime scene and a time window. They draw a geographic boundary on a map using GPS coordinates. They submit a warrant to Google asking for every Google account that shows location activity inside that boundary during that time.
Google searches its database, which contains detailed location records from hundreds of millions of devices worldwide. Every Android smartphone with location services enabled. Every device using Google Maps. Every account with location history turned on.
The search does not target a suspect. It targets a place and a time. Everyone whose smartphone was in that area gets swept into the net.
Google returns the list. Police narrow it down. They identify devices of interest and request additional information. Name. Address. Email. Account history. Search history.
All of it handed over without the account holder ever being notified until Google sends a legal notice giving them a narrow window to challenge it in court.
Most people never get that notice in time. Most people do not even understand what they are looking at when they do.
In Molina's case, the geofence warrant did not even identify him. It identified an old smartphone he no longer used, still logged into his Google account, in the possession of someone else entirely.
The technology had no way to distinguish between a person and their account on a device they no longer owned.
This Happens Thousands Of Times A Year
Jorge Molina's case is not an outlier.
Google reported receiving approximately 9,000 geofence warrants in 2018 alone, a number that represented a 1,500% increase from the previous year. Each warrant required a search of tens of millions of Google user accounts.
A bicyclist in Florida was swept into a burglary investigation because his GPS exercise app tracked his ride past the crime scene.
Two men in California are currently appealing murder convictions obtained partly through geofence warrant evidence, arguing the warrants violated their constitutional rights.
A federal judge described the process as a digital dragnet, a direct contradiction of two hundred years of American constitutional law that requires suspicion of a specific individual before conducting a search.
The warrants continue to be issued thousands of times per year.
What Your Smartphone Has To Do With This
Molina's nightmare began because an old smartphone he had given away was still logged into his Google account.
But the broader lesson is much simpler than that.
Google had his location data because his smartphone had been generating it for years. Every movement. Every route. Every timestamp. All of it stored in Google's servers, tied to his identity, accessible to any law enforcement agency willing to sign a warrant.
He had done nothing wrong.
He had simply used an Android smartphone with location services enabled.
That was enough.
The Ghostphone runs GrapheneOS, which removes Google entirely from the operating system. There is no Google account to log into. There is no location history being stored on Google's servers. There is no database entry to return when a geofence warrant comes in.
You cannot be placed at a crime scene by data that was never collected.
That is not a feature. That is the point.
The Ghost Phone
No Google account. No location history. No geofence warrant exposure.
Ed Warren is a Digital Privacy Consultant with over 15 years of experience in the surveillance and data security industry.
