Mosaic is a privacy-engineered marketplace for location data. App publishers monetize signals through an SDK that strips PII before egress. Brands and analysts consume the result — pre-aggregated, auditable, risk-free for everyone in the chain.
Drop our SDK into your app. We hash identifiers on-device, aggregate inside our perimeter, and pay you on the cleared revenue. Your users keep their privacy. Your team keeps its weekends.
Query foot traffic, audience reach, and competitive share through one API. Every result is pre-aggregated and ships with panel composition and confidence intervals — so legal signs off and analysts trust the answer.
The SDK collects opt-in location events inside the publisher's app. Identifiers are k-hashed on-device. No raw device IDs ever leave the phone.
Hashed events land in Mosaic. We bucket them into H3 hex cells, audience segments, and category counts before anything is queryable.
Identifier graphs are dropped, opt-out syncs within minutes, and every aggregate carries panel composition and a confidence interval.
Buyers query the result through SDK, REST, or SQL. The smallest unit they ever receive is a cell, segment, or count — never a path, never a person.
Daily visit counts, dwell time, and trade-area shape for any place or chain in the country. Refresh daily, not next quarter.
Most location SDKs collect first, ask later. Mosaic inverts that: identifiers are hashed before they leave the device, and only aggregates are eligible for payout. You ship one library; we handle the legal posture.
ATT-compliant prompt, GDPR + CCPA notice, and a user-facing audit screen — themed to your app, not a generic modal.
k-anonymous hashing happens before any payload is composed. No raw MAID or location string ever crosses the wire.
Per-aggregate accounting. You can reconcile your statement against the rolled-up cells we sold.
Open changelog, signed releases, and a public threat model. We document what we drop, not just what we keep.
Most location feeds were built on raw device records, then patched with policy. Mosaic was built the other way around: we ship aggregates because that's all we ever held — on either side of the marketplace.
Suppliers integrate the SDK to capture opt-in signals. Buyers access the same data model via typed client, REST API, or direct warehouse query. Every response carries panel composition and a confidence interval — so you can show your work.
// Buyer: POI visitation for an H3 cell, last 7 days
const res = await fetch(
"https://api.mosaicsdk.com/v1/analytics/poi-visitation?" +
new URLSearchParams({
h3_index: "8a2a1072b59ffff",
date_from: "2026-04-24",
date_to: "2026-04-30",
consent_tier: "all",
}),
{ headers: { Authorization: "Bearer $MOSAIC_TOKEN" } }
);
const data = await res.json();
// { h3_index, visits, panel_size, ci_low, ci_high }We can't sell what we never had. The pipeline drops identifiers on the supplier side, aggregates inside our perimeter, and ships counts to the buyer — never paths.
Read the privacy whitepaperTell us whether you're sourcing the data or using it. We'll route you to the right team and the smallest, cleanest version of the answer.