Privacy / 8 min read
What your mobile carrier can actually see
Discussions about mobile privacy tend to swing between two wrong answers: that carriers read your messages, and that encryption means they see nothing. Neither is true, and the reality in between is more useful to understand.
Here is what a network operator genuinely observes, why it observes it, and which of those things change when the subscriber identity is anonymous.
Location, at tower resolution
To deliver a packet to your phone the network must know which cell you are attached to. This is not optional and it is not logging in the pejorative sense; it is how the system functions. The resolution is the cell, which in a dense city can be a few hundred metres and in the countryside can be several kilometres.
Handover records accumulate as you move, which over time make a fairly detailed movement pattern. This is the data that turns up in court cases and in the occasional scandal about carriers selling location to aggregators.
An anonymous eSIM does not stop this. What it changes is whose movement pattern it is. A pattern attached to an unnamed prepaid subscriber is a much weaker artefact than one attached to your passport number.
Volume and timing, not content
Your data is encrypted in transit for essentially everything modern. The carrier cannot read a message, a page or a video. What it can see is that a certain quantity of encrypted traffic moved at a certain time, which is also precisely what it needs in order to bill you.
Volume and timing are not nothing. Traffic analysis can infer a great deal from patterns alone, such as when you wake up and when you are on a call. But the content itself is genuinely out of reach, and claims to the contrary usually confuse the network with the apps running on top of it.
Destinations, sometimes
DNS queries and the server name in a TLS handshake often reveal which site you are contacting even though the content is hidden. Encrypted DNS and encrypted client hello are closing this gap, but coverage is uneven and depends on your device and the sites involved.
This is the one area where a VPN genuinely changes the picture rather than moving trust around. With a VPN the network sees a steady stream to a single endpoint and learns very little about destinations, at the cost of the VPN operator learning them instead.
- Use encrypted DNS if your device supports it
- Use a VPN when destination privacy matters, choosing the operator carefully
- Understand that a VPN does not hide your location from the tower
The subscriber record is the real asset
The single most valuable thing a carrier holds is not any individual log line. It is the record that says this credential belongs to this person, verified against this document, at this address. Every other piece of data becomes far more powerful once it can be joined to that record.
Mandatory SIM registration laws exist precisely to guarantee that record exists. Countries that require it are not primarily interested in your data volume; they are interested in being able to resolve a number to a person on demand.
An anonymous eSIM removes that join key. The operational data still exists, because it must, but the row that would connect it to a legal identity was never created.
A realistic model to work with
Assume the network knows roughly where you are, how much you use and when. Assume it does not know what you said. Assume destinations leak unless you have taken a specific step to prevent it. And assume that all of this is far less consequential when it is not attached to your name.
That model is boring, which is the point. Privacy decisions made against an accurate picture tend to be better than those made against either paranoia or complacency.