More than 11.4 million Android users in Venezuela received an emergency alert seconds before the ground began to shake on Wednesday, as Google’s earthquake warning system transformed a network of smartphones into a makeshift seismic observatory. The alerts, triggered by the initial, less destructive pressure waves, gave residents of Caracas and other affected areas a critical window—in some cases just six seconds—to take cover before the arrival of the stronger shear waves. Venezuela, which lacks a national early-warning system, became an unplanned demonstration of a technology that now operates in 98 countries, leveraging the accelerometers embedded in over two billion devices worldwide.

The system works by detecting the characteristic vibrations of an earthquake’s P-waves through the same sensors that allow a phone to rotate its screen. When thousands of devices in a concentrated area register identical shaking patterns simultaneously, Google’s servers analyse the data in real time, confirm the event, and dispatch warnings to users in the projected path of the tremor. In the Venezuelan case, the first seismic waves were detected three seconds after the rupture, the earthquake was confirmed six seconds later, and alerts reached 11.4 million people within 21 seconds. The service, launched in 2021 and progressively expanded, issues two tiers of warning: an urgent take-action alert for areas expecting strong shaking, and a less intrusive notification for regions likely to experience lighter motion.

Viewed from Brussels, however, the same technical capability that saved lives has sharpened long-standing privacy concerns. European analysts note that the system relies on the continuous, automatic transmission of accelerometer data to Google’s servers, where it is compared across devices to map community-level behaviour. This functionality, which was not disclosed to users at the time of its introduction, has not been activated in European markets. Nobel laureate Joseph Stiglitz, commenting on the broader implications, has argued that surreptitious control of user data amounts to “hacking the market”—and, by extension, democratic processes. The ability to reconstruct the movements of a neighbourhood, a protest, or an electoral cohort from aggregated sensor data, privacy advocates warn, pushes far beyond the boundaries of individual consent established by the GDPR.

The earthquake also exposed the fragility of digital communication channels in a crisis. As mobile networks became overloaded or damaged, WhatsApp and conventional calls failed, forcing families to fall back on SMS, Wi-Fi calling, and alternative apps. Authorities in Argentina, home to a large Venezuelan diaspora, urged users to send short, clear text messages and to designate a single contact outside the affected zone to relay information. Simultaneously, cybercriminals exploited the chaos with fake donation campaigns, cloned profiles, and manipulated QR codes, prompting consumer protection agencies to issue detailed verification guidance for those wishing to send aid.

The next milestone to watch is regulatory. The European Commission has previously signalled its intention to examine the legal basis for large-scale sensor-data collection under the Digital Services Act, and the Venezuelan episode is likely to accelerate that scrutiny. For now, the technology remains a stark illustration of the trade-off between public safety and the pervasive harvesting of personal data, a debate that will intensify as similar systems are proposed for other natural hazards.