Phone location data can reveal visits to hospitals and clinics, yet HIPAA generally does not cover it. Only six states ban selling precise geolocation data, while settings changes can limit tracking.