Flock Wanted to Surveil Cities via Your Uber

according to Tom's Guide

A leaked internal pitch deck from surveillance company Flock Safety reveals a plan to add an estimated 350,000 rideshare and delivery vehicles to its automated license plate reading network. This isn't a story about incremental growth. These documents, reported by 404 Media and detailed by Tom's Guide, show an ambition to leap from stationary watchposts to a mobile, unmarked surveillance grid powered by the daily movement of the entire gig economy.

The 350,000-Sensor Skyhook

The core artifact is a presentation Flock used to pitch a partnership to potential customers, including Georgia's Office of the Attorney General in August 2025. It centered on a deal with dash cam maker Nexar, which markets its hardware to rideshare drivers for safety and incident documentation.

The proposal was straightforward, its implications radical: Flock would tap into Nexar's installed base of dash cams in Uber, Lyft, and other delivery vehicles. Each device would quietly scan and log the license plates of every surrounding vehicle. Flock confirmed the partnership was never executed, but the pitch remains a blueprint. It aimed to transform hundreds of thousands of private, commercially-operated cars, cars you might hail for a trip to the airport or order a burrito from, into a roving, data-harvesting extension of FlockOS.

The pitch deck reveals an ambitious push toward mobile tracking. Crucially, the documents leave it unclear whether Uber or Lyft drivers would have even been informed that their dash cams were feeding data into a surveillance network.

This is a scale play. Flock's strength is its fixed network of pole-mounted ALPRs (Automated License Plate Readers), which it says operates in nearly every U.S. state. But a pole is stationary. It covers an intersection, a neighborhood entrance, a highway on-ramp. A car equipped with the right software covers unpredictable, sprawling routes: residential streets, parking lots, alleys, and industrial zones often absent from fixed-camera maps. The promise to customers was a surveillance net that could finally follow you home.

The Strategic Pivot: From Neighborhood Watchers to National Trackers

Flock's origin story is a classic tech narrative: founder Garrett Langley started the company in 2017 to combat local property crime in Atlanta. The cameras logged plates, vehicle color, make, and model, creating a digital ledger for police to check against lists of stolen cars or Amber Alerts.

The network evolved into FlockOS, an interconnected system that allows law enforcement agencies subscribing to Flock to trace a vehicle's movements across municipal and even state lines. This transformation, from local tool to nationwide mass surveillance apparatus, is central to understanding the Nexar proposal. It wasn't about improving local safety anymore. It was about saturating the map with sensors until there was nowhere left to drive off-grid.

Why mobile? Two reasons stand out. First, it's a brute-force solution to coverage gaps. Second, and perhaps more strategically, it's a defensive move. The source material notes that public backlash against Flock's fixed cameras is growing. Organizers have built tools like DeFlock to map them, and some have taken direct action by cutting down the poles. Mobile sensors are harder to map, harder to protest, and impossible to physically dismantle without targeting private vehicles. It insulates the hardware from interference while exponentially expanding its reach.

A Silent Partner: The Gig Driver's Unwitting Role

The most ethically fraught aspect of the plan is its opacity. The documents make no mention of clear, affirmative consent from the drivers whose vehicles would become the sensors. The legal sleight-of-hand likely would have been buried in updates to the Nexar Terms of Service or the Uber/Lyft driver agreements, dense legal documents routinely accepted with a click.

For the driver, the proposition is a profound violation of agency. You sign up to deliver food or drive passengers, not to conduct passive surveillance for a private company that sells data to law enforcement. Your car, a private asset you maintain and finance, becomes a revenue-generating surveillance device for a third party without your explicit, ongoing knowledge.

For the passenger, the violation is absolute. You have no relationship with Nexar or Flock, and you certainly didn't agree to have your license plate, location, and travel patterns logged simply because you called a car. This transforms a routine commercial transaction, a ride, into a covert intelligence-gathering operation. It obliterates any expectation of anonymity in movement, a cornerstone of privacy in public spaces.

The companies involved have been silent. According to the source reports, Uber, Lyft, and Nexar did not respond to requests for comment.

The Data Firehose by the Numbers

Let's quantify the ambition. While the source doesn't provide total U.S. rideshare fleet numbers, the "350k Uber/Lyft and other delivery service devices" figure from Flock's own deck is the key metric.

• Fixed vs. Mobile Scale: For context, a separate Carscoops source in the provided material states there are "over 120,000 stationary automated license plate reading cameras" across the USA, with Flock as a leader. The Nexar plan proposed adding nearly three times that many mobile units.
• Coverage Dynamics: A fixed camera scans plates at one point. A mobile camera scans plates along miles of route. A single eight-hour driving shift could capture data equivalent to dozens of fixed cameras spread across a city.
• The Revenue Model: Flock sells access to its system to law enforcement agencies and communities via subscription. This mobile data would be a premium product. It offers not just a snapshot of a car at an intersection, but a detailed, time-stamped map of its daily life: where it goes, how often, and with whom it might meet (based on co-location of other scanned plates).

This isn't just more data. It's a different category of data, behavioral and habitual over time, rather than episodic. For entities that buy this access, the power shifts from investigating where a suspect's car was to predicting where it will be.

The Market-Driven Path to a Monitored Society

This story often triggers a comparison to China's state-mandated surveillance systems. The contrast is more illuminating than the similarity. China's model is top-down, state-controlled, and ideologically justified. Flock's model, and the Nexar proposal, represents a privatized, market-driven path to pervasive monitoring.

Flock doesn't force cities to install cameras. It sells "safety" as a subscription service (SaaS). Communities and police departments, often under pressure to combat crime with limited resources, buy in. The network grows organically, town by town, contract by contract. The Nexar deal illustrates the next logical step: instead of selling hardware, lease the sensing capacity of an existing mobile fleet. It's surveillance-as-a-service meets the gig economy. The incentive isn't social control, but recurring revenue and ever-expanding market share.

This American model is diffuse, owned by private companies, and sold piecemeal. That makes it harder to confront with a single law or protest. It also creates a powerful, self-perpetuating surveillance-industrial complex where the financial imperative to grow the network constantly conflicts with individual privacy rights.

The Fallout and the Inevitable Iteration

The immediate fallout from this leak is a public relations disaster and a flashing red light for regulators. It forces a conversation about the limits of passive data collection from consumer devices and the need for explicit laws governing how such data can be aggregated and resold to government agencies.

XOOMAR Analysis: This failed partnership is not a dead end. It's a beta test. The core idea, piggybacking on existing mobile fleets to build cheap, ubiquitous surveillance, is too strategically valuable to abandon.

What to watch for next:

1. Regulatory Scrutiny on Data Partnerships: Watch for state attorneys general (beyond Georgia) or federal bodies like the FTC to examine the legality of transforming consumer IoT devices into law enforcement tools without clear, layered consent.

2. New Vessels for the Same Concept: If not Uber cars, then what? Delivery robots, municipal vehicles (garbage trucks, postal vans), long-haul trucking fleets, or even autonomous taxi prototypes all represent potential mobile sensor platforms. The technical blueprint is now public.

3. The Cybersecurity Angle: A network of 350,000 connected dash cams is a massive attack surface. As we've seen in coverage of AI agents hacking production systems, the integration of complex AI-driven data collection into physical infrastructure creates novel risks. A compromised fleet could feed poisoned data or become a tool for industrial espionage.

The Flock-Nexar pitch is more than a abandoned plan. It's a window into the endpoint of "smart city" logic, where every piece of moving commercial infrastructure is also a watchful eye. It reveals an ambition to make surveillance not just widespread, but ambient and funded by our daily routines. The deal is dead. The strategy is very much alive.

Impact Analysis

• The plan would have turned everyday rideshare and delivery vehicles into mobile surveillance nodes, drastically expanding passive tracking of public movements.
• It reveals how private surveillance networks can seek exponential growth by co-opting existing commercial infrastructure without clear user consent.
• The leaked pitch shows law enforcement agencies like Georgia's Attorney General Office were directly targeted as potential customers for this expanded surveillance capability.