This guide assumes an ordinary person at a lawful protest in a country with courts, not an activist operating under an authoritarian government; that situation needs a stricter playbook, closer to our whistleblower OPSEC guide. It also assumes the realistic goal: not invisibility, but keeping your attendance out of databases that outlive the afternoon.
How attendance gets recorded
Four collection channels do most of the work, and only one of them requires anyone to target you personally.
- Carrier records and tower dumps. Your phone registers with nearby cell towers continuously. Investigators can later request the list of every device that touched the towers around a location and time window. Presence in that list requires nothing but a powered-on phone.
- Location-history and advertising data. Apps with location permission feed databases that can be queried after the fact, whether through geofence warrants or by purchase from data brokers. Google's move of Location History onto the device in 2023 narrowed the classic geofence warrant against one company; it did not touch the broker ecosystem fed by app SDKs.
- Cell-site simulators. IMSI catchers deployed near demonstrations impersonate towers and collect the identifiers of every phone in range. Documented at protests in multiple countries; invisible to you when it happens.
- Cameras around the event. Facial recognition on fixed and body-worn cameras, plus license plate readers covering the approach routes. Your phone is not involved, which is a reminder that phone hygiene is only part of the picture.
The only arrangement that generates no phone record of your attendance is leaving the phone at home, powered on, doing its normal idle traffic. For many people at many events, that is the right call, arranged with a buddy who has your meeting plan on paper.
If you bring the phone
Airplane mode from before you arrive until after you leave stops the carrier-side channels: no tower registrations, no tower-dump presence, nothing for an IMSI catcher to catch. It costs you the ability to call, which is the trade. Two cautions: enable it well away from the location, since toggling it at the edge of the crowd bookends your attendance in the logs, and remember that a powered-on phone in airplane mode still records locally, and some system services resume network traffic the moment airplane mode lifts. A Faraday bag achieves the same isolation with a physical guarantee instead of a software toggle.
Before you go, on the device itself:
- Switch unlock to passcode only. Disable fingerprint and face unlock for the day. In several jurisdictions, courts have treated compelled biometric unlock differently from compelled passcode disclosure, and separate from the legal question, a face unlock works when a phone is simply held up to you. iOS enters passcode-required mode when you hold the side and volume buttons; Android has lockdown mode in the power menu. Practice the gesture.
- Use a strong passcode, six digits minimum, alphanumeric better. If the phone is seized, the passcode is what stands between its contents and forensic extraction tools, whose success rates depend heavily on passcode strength and device state.
- Revoke location permissions from every app that does not need them that day, and turn off the OS location service entirely while you are out. This is the channel that feeds the purchasable databases.
- Set your messaging to disappear. In an end-to-end encrypted messenger, turn on disappearing messages for protest-related conversations beforehand. Encryption protects messages in transit; a seized, unlocked phone shows whatever is still on it. Retention you configured last week is the defense you cannot improvise at the scene.
- Charge it, and consider a spare battery. A dead phone is the worst of both worlds: it recorded your approach and cannot reach anyone when you need it.
Photos: yours, and of you
Photos you take at a demonstration embed timestamps and, if location was on, GPS coordinates in their metadata. Most social platforms strip EXIF on upload, but the original in your camera roll keeps it, and anything shared as a file, including over email or some messengers, may carry it along. Strip metadata before sharing anything from the event.
The larger issue is other people. A crowd photo posted publicly is input for facial recognition against everyone in the frame, and bystanders in your shot did not choose that exposure. If you share crowd images, favor angles without identifiable faces, or blur them; note that pixelation done weakly can be reversed, so use solid masking rather than a light blur.
Communication during the event
SMS and ordinary phone calls are visible to the carrier in content and metadata, and to any cell-site simulator in range. Coordinate over an end-to-end encrypted messenger instead, and prefer arranging meeting points and fallback plans in advance, so that the day itself needs little communication at all. Remember what encryption does and does not cover: contents are protected end to end, but the fact that your device sent traffic at a time and place is transport metadata, which is part of why airplane-mode discipline matters more than app choice while you are inside the perimeter. Our post on metadata surveillance explains why the who-when-where layer is often worth more to an observer than the words.
| Choice | Record it prevents | Cost |
|---|---|---|
| Phone left at home | All phone-derived evidence of attendance | No communication or camera; needs a paper plan |
| Airplane mode / Faraday bag door to door | Tower dumps, IMSI catchers, carrier metadata | Unreachable while isolated; local data still on device |
| Passcode-only unlock + strong passcode | Casual and some forensic access if seized | Slower unlocking all day |
| Location services off, permissions revoked | Broker and geofence data from that day | No navigation until re-enabled |
None of these steps is exotic, and none signals wrongdoing; they are the digital equivalent of deciding what to carry in your pockets. The asymmetry worth remembering is temporal. The march lasts an afternoon. Tower dumps, broker datasets, and photo archives persist for years, and get queried under political conditions nobody can predict from here. Configure for the archive, not the afternoon.