An interactive online map that shows locations of wearable fitness-tracker users inadvertently reveals the locations of secret U.S. military bases overseas, according to reports Sunday. The Global Heat Map from Strava, a San Francisco-based GPS tracking company, visualizes activity from tens of millions of users of its app from 2015 through September 2017.

 

Its app can be used on popular devices such as Fitbit, Jawbone and Vitofit. But in doing so, it also shows locations where soldiers wearing those devices are training, including sites in Somalia, Niger, Syria and Afghanistan.

While the bases are not marked as such on the app, their remote locations suggest their true functions. Some bases are public knowledge, but others are not, and either way, the data could be used to track soldiers' training routines and plan ambushes, experts told The Guardian and the Washington Post.

"This is a clear security threat," one security analyst told the Post. After the reports, Strava on Sunday urged its users to review the app's privacy settings.