Skip to content

Significant Locations

Definition

An iOS feature that records frequently visited places using a combination of GPS, Wi-Fi, and cell data. Stored in an encrypted SQLite database in the com.apple.routined directory. Requires a full file-system acquisition and the device passcode or a hardware decryption bypass to access.

Platform
iOS
Data sources combined
GPS, Wi-Fi, and cell data
Storage
Encrypted SQLite database in the com.apple.routined directory
Access requirement
Full file-system acquisition plus device passcode or hardware decryption bypass

Common questions

Why can't Significant Locations data be pulled from a standard logical or backup-level extraction?+

The database lives in a protected part of the file system that a logical extraction or an iTunes/Finder-style encrypted backup does not expose, so recovering it requires either a full file-system extraction using a jailbreak or exploit-based tool, or a hardware-level bypass that grants access to the underlying encrypted storage.

What does Significant Locations data show that ordinary GPS location logs from apps might not?+

It aggregates frequently visited places system-wide across all the location signals iOS collects, building patterns of routine movement such as home, work, and regularly revisited addresses, rather than reflecting the location activity of any single app, which makes it useful for establishing a device holder's habitual movement pattern.

Related terms

Cell Site Location Information (CSLI)
Records held by a mobile network operator showing which cell towers a device registered with and when. Historical CSLI covers past registrations....
Geofencing Artifact
A record generated when a device enters or exits a defined geographic boundary. Fitness apps, delivery apps, and smart-home apps create these...
GNSS (Global Navigation Satellite System)
The family of satellite-based positioning systems including US GPS, Russian GLONASS, European Galileo, and Chinese BeiDou. Mobile chipsets typically support multiple constellations...
Tower Dump
A legal demand directed to a mobile network operator for records of all devices that registered with one or more specific cell...
Wi-Fi Probe Request
A broadcast management frame that a Wi-Fi radio sends when scanning for known networks. The frame advertises the SSIDs stored in the...

Explained in

Your journey to becoming a forensic professional starts here.

Practice with mock tests, learn from structured notes, and get your questions answered by a global forensic community, all in one place.