This is what I sent... feel free to mention any issues you see with it which may help other people.
Hello XX,
I am concerned about the security of my cell phone ___location information.
Yesterday, a vulnerability was found that leaked the real-time ___location of 95% of the cell phones in the US. That is unacceptable.
US cell phone carriers including AT&T, Sprint, T-Mobile and Verizon share personal information, including phone numbers and real-time ___location of cell phones, with companies such as LocationSmart, who then resells the information to other companies for marketing and other purposes. Carriers to not provide a way for users to opt-out of such sharing. This is completely legal under the current Electronic Communications Privacy Act. LocationSmart claims that they will not share the gathered information without user consent, but the definition of consent is vague, and that doesn't protect the public from security breaches. I understand that carriers need to have ___location data to comply with emergency 911 regulations, but it is unacceptable that they are able to share it with 3rd parties who may use it for dubious purposes, and may have lax security standards.
We need to have laws that protect the privacy of cell phone users, and do not allow carriers to sell personal information to 3rd parties. Or, and the very least, customers should be able to opt-out of such sharing from their carriers.
