Elon Jet, Jack Sweeney, and the Twenty-Five Dollar Receiver That Exposed ADS-B's Privacy Problem

Every ADS-B Out transponder broadcasts its position, altitude, groundspeed, and a permanent unique identifier twice per second to anyone within roughly 200 miles with the right equipment. That equipment costs about $25. The story of Jack Sweeney and his Elon Jet tracking account is the most public demonstration of what that combination means for aircraft privacy - and it forced a regulatory response that every GA pilot should understand.

What ADS-B Out Actually Broadcasts

When the FAA mandated ADS-B Out for most controlled airspace beginning January 1, 2020, the engineering rationale was sound: replace aging ground-based radar with a GPS-derived self-reporting system offering better precision, lower separation requirements, and improved coverage in terrain-masked areas.

Each ADS-B Out message contains GPS-derived position, pressure altitude, groundspeed, track, an emergency status field, a call sign field, and an ICAO 24-bit address - a six-character hexadecimal code like A823F1. The International Civil Aviation Organization assigns these addresses the way the internet manages IP addresses: as globally unique identifiers tied directly to aircraft registration.

In the United States, that ICAO address links back to an N-number, aircraft make and model, and the registered owner’s name and address through the FAA aircraft registry - which is public record, freely searchable, with no friction between the radio signal and the registered owner’s identity.

How a $25 Receiver Tracks Any Aircraft

The ADS-B signals broadcast on 978 MHz (UAT) and 1090 MHz (extended squitter) can be received with USB dongles originally designed for digital cable TV - hardware available online for $20–$30. Free software decodes the messages automatically. Step-by-step setup guides are freely available, and within an hour of unboxing the hardware, a receiver can log aircraft within roughly 200 miles of its location.

Scale that across thousands of hobbyists and volunteers who’ve deployed similar setups and contributed their data to aggregation networks - FlightAware, Flightradar24, and the OpenSky Network - and the coverage becomes comprehensive. FlightAware estimates their network covers essentially all of the continental United States above approximately 3,000 feet AGL.

The OpenSky Network, a nonprofit research consortium, runs independent receiver infrastructure for academic use. Researchers have used it to analyze airline punctuality, measure actual fuel burn against filed flight plans, map traffic patterns around wildfires, and audit environmental claims from carriers against their actual operational data. It is a genuinely valuable scientific resource. It is also a publicly queryable database of where any equipped aircraft has been.

The Jack Sweeney Account and What It Proved

Jack Sweeney, a college student in Florida, connected a USB dongle to his laptop, wrote a Python script, and began aggregating data from volunteer receiver networks. The result was a near-real-time public record of Elon Musk’s Gulfstream G650 - every departure from Austin, every landing at LAX, every fuel stop and ramp time. He called the account Elon Jet. Within a year, it had over 500,000 followers.

Sweeney wasn’t exploiting a vulnerability. He was pointing a radio at the sky and publishing what it heard. When Musk’s legal representatives attempted to have the accounts removed from social media, the underlying signal was untouched. Sweeney’s account was suspended on Twitter in December 2022, then later reinstated after Musk acquired the platform. An internship Sweeney had been offered at a Musk company was reportedly pulled after he refused to stop posting. He moved the accounts to other platforms and continued.

Taylor Swift’s team went further and specifically targeted ADS-B Exchange, a flight tracking platform built explicitly to avoid filtering raw signal data. ADS-B Exchange declined to remove it, taking the position that raw ADS-B data was public domain and that any filtering decision belonged to the FAA.

What LADD Covers - and What It Doesn’t

The FAA’s pre-existing response to this problem was the Limiting Aircraft Data Displayed (LADD) program. Aircraft operators can request that participating commercial flight tracking services anonymize or withhold their flight data. If you’ve searched a tail number on FlightAware and seen “blocked” where the flight track should be, that’s LADD. Corporate flight departments and individual owners can enroll, and FlightAware and Flightradar24 honor these requests contractually.

LADD’s limitation is structural: it only binds commercial partners who have agreed to participate. It has no authority over individual receivers, hobbyist aggregators, or any service outside the data agreement. Sweeney wasn’t pulling anonymized feeds from FlightAware. He was aggregating from sources that hadn’t signed anything. The underlying signal never changed.

ADS-B Exchange was acquired by FlightAware in 2023. After the acquisition, it adopted FlightAware’s LADD compliance policies - the platform that had become known for refusing to censor began honoring the same agreements as the commercial aggregators. The raw signal, however, is still available to anyone running their own receiver. The gap didn’t close. One prominent aggregator moved inside the fence.

The FAA’s Technical Solution: Privacy ICAO Address (PIA)

The FAA’s substantive response was the Privacy ICAO Address (PIA) program, which launched in 2022 and expanded through 2023. PIA addresses the root cause rather than trying to suppress data downstream.

Under standard ADS-B, an aircraft broadcasts the same ICAO address every flight, indefinitely. That stability is the foundation of tracking - the same identifier appearing in Teterboro, Memphis, and Santa Monica. PIA replaces that stable identifier with a temporary, randomly generated address that rotates periodically.

The critical engineering problem was maintaining safety functions. The FAA manages a real-time back-end mapping that associates any active PIA address with the actual aircraft’s identity. Air traffic control sees the real aircraft. Separation works normally. From a rooftop receiver, the aircraft appears as an anonymous target whose identifier changes over time, severing the link between the radio signal and the registered owner.

PIA is most effective against retrospective database analysis. Anyone attempting to compile a six-month flight history of a specific tail number from ADS-B archives will find fragmentary, unusable data if PIA was active with regular rotations. That’s a genuine improvement.

PIA is less effective against active real-time tracking. If someone is following a specific flight in real time from departure to arrival, they’re following the trajectory, not just the identifier. The address could rotate the next day and their real-time capture of that flight is unaffected.

The Call Sign Field: A Configuration Issue That Matters

ADS-B Out broadcasts two fields that carry identifying information: the ICAO address, which PIA replaces, and the call sign field. Many avionics installations are configured by default to broadcast the aircraft’s N-number as the call sign.

If the call sign field is transmitting a registration while the PIA address anonymizes the ICAO side, a receiver correlating the call sign field rather than the ICAO address still identifies the aircraft. Getting PIA right requires verifying both fields. The FAA’s guidance covers this, but the configuration responsibility falls on the operator and their avionics shop. It is not a set-and-forget enrollment.

As of early 2026, PIA availability has been expanding but is not yet a standard feature accessible to all GA pilots through a simple online portal. It is primarily available to operators who can document a security need, with the FAA moving toward broader availability on a deliberate timeline.

Why This Matters for Pilots

Before January 1, 2020, systematically tracking a private aircraft required physical observation or FAA cooperation. Building a comprehensive flight history for a specific tail number was not something one person with a laptop could do in an afternoon.

After the ADS-B mandate, it became trivially easy. Every ADS-B-equipped aircraft generates a permanent, searchable record of every flight it makes. The pattern-of-life analysis - departure airports, arrival airports, stopover durations, routes, ramp times - that once required a surveillance team and weeks of work can now be run as a database query.

For most GA pilots flying weekend cross-countries in a Cessna 172, the practical exposure is minimal. For business aviation, sensitive operations, medical transport, or anyone whose movements carry commercial or personal significance, the tools to address this exist - they just require action rather than accepting the defaults.

The signal is on by default. The receiving infrastructure is global, inexpensive, and growing denser every year. The data is retained indefinitely by multiple parties with widely varying privacy policies. None of this undermines the case for ADS-B - the safety improvements are real, and traffic situational awareness for equipped pilots is genuinely valuable. But the defaults matter.

Key Takeaways

• ADS-B Out is a public broadcast. Every equipped aircraft transmits position, altitude, and a permanent unique identifier twice per second to anyone with a $25 receiver and free software.
• The FAA registry closes the gap between signal and owner. ICAO addresses map directly to N-numbers, registered owners, and addresses through a free public lookup with no friction.
• LADD blocks tracking on participating commercial platforms only. It has no authority over independent receivers or non-partner aggregators - the raw signal is unaffected.
• PIA disrupts retrospective profiling by rotating the ICAO address, but is less effective against active real-time tracking and requires deliberate avionics configuration to work correctly - including verifying the call sign field.
• Pilots with privacy exposure should act: enroll in PIA if eligible, verify call sign field configuration with an avionics shop, and understand exactly what LADD does and does not cover.