Flock Safety: General Warrants by Subscription

A Texas sheriff ran a license-plate search across the Flock Safety nationwide network. The "reason" field — the field Flock points to when it is asked how the system is audited — read missing person. The actual investigation was an abortion case. EFF reported the discrepancy after pulling the search logs. We refer to her here as a Texas woman; we are not adding her name to the surveillance record this story is about. EFF — Flock Safety and Texas Sheriff Claimed License Plate Search Was for a Missing Person. It Was an Abortion Investigation.

She had crossed a state line. Her own state had made the procedure legal. Texas had not, and a Texas officer used a nationwide commercial license-plate-reader network — built and sold to thousands of US towns by a private company — to track where her car had gone. The audit control Flock cites in defense of the system was falsified in writing, by a sworn officer, in routine use. The query ran. The data came back. The arrest followed.

The reason field is not load-bearing. It never was. A field a user fills in by typing is not an oversight mechanism; it is a label on what was already done. The architecture assumes the labels are honest and proceeds whether they are or not. That is not a flaw in the system. It is the system.

The pro-Flock reader's frame is I am not a criminal, so I am not a target. The Texas case is the proof that this frame is built on an assumption that does not hold: that the category criminal is fixed. It is not. The Texas woman was not a criminal in her own state. She became one by crossing a state line into a jurisdiction whose legislature had rewritten the category while she was in it. The surveillance did not need to be rebuilt to accommodate the new definition. The infrastructure was already there.

The same query shape works for an undocumented worker, a labor organizer, a journalist's source, a protest attendee, a person seeking gender-affirming care, anyone the next administration decides is the problem. The dragnet does not inspect the moral content of the search. It accepts the plate, returns the locations, and logs whatever the operator typed in the reason box. What is legal today is criminal tomorrow at the stroke of a pen — and the surveillance built for today's definition will execute against tomorrow's without modification.

Mass surveillance is not good for anyone — including the people who think they are not the targets. The infrastructure outlasts the regime that built it. The definition of "crime" is one election away from changing for any reader who currently believes they're not the target. The Texas woman's arrest is not an edge case of the system. It is the system working at the speed and resolution it was designed for, against a category that had just been added to the list.

The Fourth Amendment reads, in full:

The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized.

The framers wrote this against a specific grievance: the general warrant and its colonial cousin the writ of assistance — open-ended search authority that empowered a Crown officer to search any house, any ship, any person, without naming the target or stating the cause. The colonists watched their homes ransacked under paper that did not have to say whose home or for what. They banned the instrument. The first clause of the Bill of Rights to address policing exists because the framers had lived under the alternative and refused to bequeath it.

A human watcher with a list of plates is one thing. A camera in five thousand-plus US communities, recording every plate that passes, queryable by any of three thousand nine hundred-plus law-enforcement agencies through a patrol-car laptop, is a different thing. EFF obtained datasets covering more than 12 million Flock searches by more than 3,900 agencies between December 2024 and October 2025. 404 Media's parallel reporting puts the camera footprint at more than 5,000 communities. That is a general warrant executed by software, at the speed of a database lookup, in volume the framers could not have imagined and would have recognized instantly.

The amendment does not forbid surveillance per se. It forbids surveillance without particularity — without the named place, the named person, the stated cause. Flock's architecture is the inverse: every car, everywhere it went, queryable by name only after the system has already recorded the answer. The cause is supplied by whichever officer chooses to type in the box. The framers wrote the amendment to foreclose exactly this shape, in advance of its technological feasibility, by banning the legal instrument that authorized it.

The Electronic Frontier Foundation's 2025 year-end retrospective documents the scale at primary resolution: more than 12 million Flock searches by more than 3,900 agencies between December 2024 and October 2025. 404 Media puts the camera footprint at over 5,000 US communities. EFF's Atlas of Surveillance — the database that lists US police technology deployments, agency by agency — added more than 300 new Flock-using agencies in a single batch scraped from the Raleigh News & Observer's reporting alone. The deployment count is updated monthly and grows in every update.

Federal access happens through a side door. Immigration and Customs Enforcement has no formal contract with Flock Safety. It does not need one. ICE obtains Flock data by asking a local police department to run a search and hand back the results. The first 404 Media investigation, by Joseph Cox in May 2025, surfaced public-records data from the Danville, Illinois Police Department: more than 4,000 nationwide and statewide Flock lookups run at federal request. The reason field — the same field falsified in the Texas case — contained entries that included immigration, ICE+ERO, and ICE WARRANT. One department.

The pattern replicates across geographies. The Source Weekly in Bend, Oregon documented 279 federal immigration queries against Bend's Flock data in the network's first three weeks of operation. VPM and the Virginia Center for Investigative Journalism documented immigration-enforcement use across Virginia jurisdictions in July 2025. The University of Washington Center for Human Rights titled its October 2025 report Leaving the Door Wide Open. The side door is not a single department's malpractice. It is the composition of the network with the absence of a federal contract that should — if formality were the constraint — have prevented the access.

Flock has stated, in response to the reporting, that federal users "will not be added to Statewide or Nationwide lookup" going forward and that sharing requests will "clearly delineate" federal-agency identity. The company has not published an audit demonstrating the policy is in effect. Treat it as Flock's stated policy, not as a verified change in operational state. Meanwhile the FBI is reportedly seeking direct nationwide access — formalizing the federal seat the side door has already filled.

Set aside the structural argument for a moment and meet the system on the ground the pro-Flock reader actually defends it from. Flock is marketed as serious-crime infrastructure — stolen vehicles, AMBER alerts, violent felonies. The use logs say otherwise. The system Flock sells is a probable- cause manufacturing engine. When the plate read is wrong, or when the "association" the algorithm flags is a registered owner who is not the suspect, the output is an arrest of the wrong person on real charges.

Redmond, Washington. A father's silver 2012 Ford Fusion was flagged "associated" with his son — who shares his name and was wanted on a felony warrant. The vehicle was registered to the father. Redmond police were aware of that detail. They arrested him anyway. KING 5's investigation documented the chain. KING 5 — A license plate camera got it wrong. Police arrested the father instead.

Colorado. Chrisanna Elser was charged with package theft on the basis of a Flock ALPR misread, with a traffic ticket issued from the same query. The case was dropped only after Elser herself gathered the exculpatory video that proved she had not been at the scene. The probable cause was the bad read. The exoneration was unpaid civilian labor. The system functioned exactly as designed; the design assumes the read is right and shifts the cost of being wrong onto the person it was wrong about. IPVM — City Sued Over Multiple Erroneous Flock LPR Camera-Based Stops.

California. A class of California drivers alleges, in a pending class-action complaint, that out-of-state agencies searched the San Francisco Police Department's Flock database more than 1.6 million times in a seven-month period and that the system as configured violates California's privacy laws. Plaintiffs allege. The figure is from the complaint, not from an adjudicated finding. That the figure was plausible enough to draw counsel into court is its own row in the ledger. The serious-crime use case is the brochure; the citation, the misread plate, and the wrong-person arrest are the operational logs.

The cameras are mounted on public roads. The plates they read belong to anyone who drives. The people who can afford not to drive — who live behind private gates the network does not point at, who fly on aircraft no automated license- plate reader watches, who retain counsel that files motions to suppress, whose prosecutors decline to charge — are underrepresented in the dataset by the architecture's own geometry. Surveillance you cannot opt out of is surveillance built for the people who can't afford to.

Flock's CEO, Garrett Langley, said the quiet part on the record to CNN Business in December 2025:

"If (people are) worried about privacy, a license plate reader is the dumbest way to do surveillance. You have a cell phone. A cell phone knows your exact location at all times."

The deflection is rhetorical, not analytical. A cellphone surveils because the user opted into a service. A Flock camera surveils because a city council bought one. The former requires the user's affirmative act; the latter is imposed by the jurisdiction's choice on people who never signed anything. But take Langley at his word for what he is conceding: a license-plate reader is, in his own telling, surveillance. He is not denying the structure. He is arguing the structure is too crude to bother regulating. The argument is true and damning at once — the surveillance you cannot opt out of is the surveillance built for the people who cannot opt out.

The investors who priced that surveillance at $7.5 billion in March 2025 do not live in the data. Bloomberg's reporting names the lead and the syndicate:

Andreessen Horowitz (a16z) — led by Marc Andreessen — led the $275 million round at the $7.5 billion valuation. Founders Fund, Kleiner Perkins, Tiger Global, and Y Combinator participated, joined by Greenoaks Capital, Bedrock Capital, Meritech Capital, Matrix Partners, and Sands Capital. Counsel: Wilson Sonsini Goodrich & Rosati. ARR had crossed $300 million, growing roughly 70% year over year. Bloomberg — Andreessen Horowitz Leads Funding Valuing Flock Safety at $7.5 Billion.

These are not back-office indexers. These are the named venture rooms of Silicon Valley, writing the check at the $7.5-billion mark, on the bull case that the network keeps expanding — more jurisdictions, more queries, more federal access, more product surface area. The investors are not buying a hardware company. They are buying a surveillance utility whose legal-risk profile is absorbed by municipal procurement and whose growth runway assumes the architecture documented in this piece continues. They have not, themselves, been arrested on a misread plate.

The reader who has followed this far may be waiting for a court to declare the architecture unconstitutional. The Institute for Justice is litigating in Norfolk and San Jose. The Washington State Supreme Court has ruled Flock data are public records, undermining the "private-vendor data" deflection. The cases are real and they may yet succeed in narrow places. This piece does not bet on them to settle the structural question, and the reader should not either.

Forty years of doctrinal narrowing precedes the ALPR dragnet. The third-party doctrine — that information voluntarily handed to a third party is unprotected by the Fourth Amendment — was written for a country where "voluntarily handing" meant signing a check at a bank or dialing a number on a landline. It was applied to email, to cell-site location data, to social-media activity, and now, by an architecture-of-composition argument the courts have not yet rejected, to where every car in five thousand communities went, when. The doctrine pre-dates the smartphone; it pre-dates the camera mesh; it pre-dates the query that is the subject of this piece. The reader who waits for a court to declare it unconstitutional is waiting for permission from an institution that has spent decades saying yes.

Compliance with current doctrine is not authority. The procedural fact that an arrangement is legal does not confer moral standing on it. The Fugitive Slave Act was legal. Internment was legal. COINTELPRO was legal as long as the memo stayed inside. Legality is the form the law happens to be in this year, in this country, with this Court. Justification is something else, and the moral argument against a privatized general-warrant infrastructure does not wait on a 5–4 ruling that might arrive in 2031 from a bench whose median justice has already signaled the answer.

The moral case is the case. Privacy is a human interest, not a procedural one. A surveillance infrastructure that would not survive a single congressional markup if proposed as a federal program — and that has been composed, jurisdiction by jurisdiction, into a national network without one — is a structure the country should refuse on the merits, whatever the courts ultimately decide about the third-party doctrine's reach to license plates. The reader does not need a Supreme Court opinion to know what the framers wrote the amendment against.

The municipal-procurement route that built the network is also the route that can dismantle it. A city that signed up to Flock can rescind the contract — and a growing number have. NBC News in September 2025 noted that Sedona, Arizona was at least the eighth city to cancel or pause its Flock contract that summer.

Sedona, AZ — September 9, 2025. The Sedona City Council voted unanimously to direct staff to end the city's Flock contract. The organizing record names a resident-run mailing list, livefreeaz.com, as the catalyst — civic, not extracurricular. Sedona Red Rock News — Sedona City Council tells staff to get Flock out of town.

Bandera, TX. The Bandera City Council voted 3-2 to terminate the Flock contract. 404 Media reported the aftermath: a councilmember responded by proposing to ban the internet and phones in the town. Not satire — minutes. 404 Media — After Town Bans Flock, Councilmember Crashes Out, Proposes Internet and Phone Ban.

Norfolk, VA. The Institute for Justice filed a federal lawsuit on behalf of two Norfolk residents arguing that the city's network of more than 170 Flock cameras creates a "detailed map of the driver's movements" in violation of the Fourth Amendment. The Norfolk case is the first Flock challenge to reach the federal appellate level; IJ is litigating a parallel suit in San Jose. Underneath all three episodes is the November 2025 Washington State Supreme Court ruling that Flock data are public records — undermining the "private-vendor data" deflection Flock has used to dodge public-records requests.

The infrastructure is not inevitable. It was bought one contract at a time and it can be unbought one contract at a time. The Sedona vote, the Bandera vote, the Norfolk suit, and the Washington ruling are the working precedent that the consent given by municipal procurement can also be withdrawn by it. A reader who has read this far has, at minimum, the address of a city council.

Flock catches some criminals. That is the premise the pro-Flock reader starts from, and it is true. Stolen cars are recovered. AMBER alerts resolve. The brochure use cases happen. The piece does not dispute them, and the argument does not require disputing them.

The question is the trade. What infrastructure have you agreed to build by signing the city contract? Who have you given the keys to — your local department, every one of three thousand nine hundred-plus other departments, a federal agency with no contract that asks any of them to run the query, and the next administration that inherits all of the above? What will they do with the keys when the people they want to catch are not the people you imagined? What will they do when the definition of "the people they want to catch" changes — and the definition has already changed once, in Texas, for the Texas woman whose name this piece holds, mid-flight, while she crossed a state line that had been an interior border the year before?

A country whose framers banned general warrants does not survive a private company selling general warrants by subscription, no matter how many stolen cars the subscription helps recover. The Fourth Amendment was not written as a balancing test against the conviction rate. It was written as a foreclosure on a class of instrument. The instrument has been re-introduced in a form the framers did not anticipate — not because they were short on imagination, but because they could not have known their republic would let a venture-backed startup sell the forbidden instrument back to every town in the country at a $7.5-billion mark.

The Texas woman did not choose this. The Redmond father did not choose this. Chrisanna Elser did not choose this. The five thousand communities did not vote on this as a country — they each signed a contract, one at a time, with a vendor whose investors priced the option to surveil all of them at $7.5 billion. The legality of every step in that chain is intact. The system the laws permit is the system Andreessen Horowitz, Founders Fund, Kleiner Perkins, Tiger Global, and Y Combinator are paying to scale.

That is the crime. Not the misread plate, though the misread plate is real. Not the falsified reason field, though the reason field is falsifiable by design. Not the ICE side door, though the side door is open. The crime is the architecture: a private company selling, by subscription, the legal instrument the Constitution was written to ban, to a country whose courts have spent forty years narrowing the doctrine that would have stopped it, one municipal contract at a time. The cameras are the visible part. The route around the Bill of Rights is the product.