How Does Find My Locate a Phone That's Turned Off? The Offline Finding Network

IT Knowledge
5 min read

When you lose your phone and open Find My on another device, its location shows up on a map. If the phone is connected to the internet, there’s nothing strange about that. It can simply report its own location to a server. But today’s finding features also show the location of a phone with no internet connection, even a phone that’s powered off. How does a device that can’t communicate announce where it is? The answer, unexpectedly, lies in strangers’ phones passing by on the street.

The basic form — powered on and online #

Starting with the simple case, the basic form of a finding feature is self-reporting. The phone uploads its own location, figured out via GPS and other signals, to a server periodically or when a “find” request comes in, and the owner looks it up from another device. Loss-response features like remote lock, displaying a message, and erasing data also run on top of this connection.

The problem is that this structure depends entirely on the phone’s internet connection. The moment a thief powers the phone off or flips on airplane mode, tracking goes dark. What appeared to fill that gap is the next stage.

The Find My network — strangers’ passing devices as mail carriers #

The idea behind Apple’s Find My network (Google runs Find Hub, Android’s finding network, on the same concept) goes like this. Even if my phone can’t reach the internet, somebody’s device passing nearby is connected. That stranger’s device gets used as an anonymous mail carrier.

Here is how it works, step by step:

  1. My offline phone periodically sends out short Bluetooth signals. Bluetooth is a short-range radio that uses very little power, so this broadcasting puts almost no strain on the battery.
  2. A stranger’s iPhone passing nearby hears the signal. That phone bundles the signal together with its own known location and uploads it to the server.
  3. When the owner opens Find My, those accumulated reports are unlocked and shown on the map.

In short, it’s a vast mutual-aid system in which hundreds of millions of devices report each other’s lost items. The more people around, the more mail carriers, so in a city even a powered-off phone gets tracked fairly accurately, while deep in an empty mountain only the last sighted spot remains.

The fact that even a powered-off phone can be found comes from a clever move in recent devices. Even when the user turns the power off, part of a chip survives in a low-power state and keeps emitting just the Bluetooth signal. Even when the battery runs out completely, the last remaining charge keeps the signal going for a while.

Privacy by design — neither the carrier nor the company knows #

Hearing about this structure for the first time, a natural worry arises. If strangers’ phones pick up my phone’s signal and upload that location to a server, doesn’t Apple or the mail carrier know where I am? The network’s design puts considerable effort into blocking exactly that concern.

  • The signal is anonymous and constantly changing. The Bluetooth signal a phone sends out contains no phone number or device name. It’s a disposable identifier that rotates constantly, so the finder can’t tell whose device it is, or even whether it’s the same device as “that one from yesterday.”
  • Location reports go up locked. The location report a carrier phone uploads is sealed with end-to-end encryption. The key exists only on the lost item owner’s devices, so even the company running the server can’t read the contents of the report (where it was found).
  • The mail carrier knows nothing. Picking up and uploading happens automatically in the background, and nothing appears on the carrier’s screen.

The result is that only the owner can learn the location. Building a massive tracking infrastructure while refusing to become a tracking company — it’s a rather fascinating piece of cryptographic design.

AirTag, and preventing abuse #

Riding on the same network are loss-prevention tags like AirTag. The tag itself is a simple device with no internet and no GPS, sending out nothing but Bluetooth signals. But because the Find My network’s mail carriers report its location on its behalf, a single keychain becomes trackable anywhere in the world.

Power like that came with a shadow. Slip a tag secretly into someone’s bag and it becomes a stalking device. So anti-abuse mechanisms are built in alongside. When a tag that isn’t yours is detected moving with you, your phone warns that an unknown tracker is traveling with you, and the tag itself may play a sound. Apple and Google aligned this alert scheme as a joint standard, so Android phones can detect an AirTag too. If you receive such an alert, don’t ignore it — follow the guidance to locate and check the tag.

Wrapping up #

So here’s the true identity of the magic that puts a powered-off phone on the map. The phone uses its last strength to send out anonymous Bluetooth signals, strangers’ passing devices pick them up and upload locked location reports, and only the owner holding the key can unlock and read them. It’s a mutual-aid system with hundreds of millions of participants, yet through anonymous identifiers and end-to-end encryption, neither the company nor the mail carriers know what’s inside. If there’s one action item to take away, all of this is the story of when the finding feature is turned on. You can’t turn it on after the phone is lost, so do check your settings once today.

X