Somewhere between your home and your office, a camera mounted on a pole, a streetlight, or a neighborhood entrance likely photographed your car, extracted your license plate number, timestamped it, and uploaded that data to a corporate server. If that infrastructure was built by Flock Safety — and in hundreds of American cities and towns, it was — that record has been sitting in a commercial database, queryable by any law enforcement agency or private community that pays for access. Until recently, you had no way to know whether anyone had ever searched for you.

That has changed, at least partially. The website HaveIBeenFlocked.com now allows any driver to enter a license plate number and see whether it appears in records obtained from Flock's system — specifically, whether the plate has been queried by one of Flock's customers. The tool does not show every capture, every location ping, or every timestamp. But it does show something the company has never volunteered: that your plate exists in the system and has attracted attention.

Flock Safety, founded in 2017 and headquartered in Atlanta, markets its Automated License Plate Recognition network primarily to local police departments, homeowners associations, and school districts. The company has been explicit about its scale — at various points its own materials have described coverage across thousands of agencies in dozens of states, with cameras capturing hundreds of millions of plate reads per month. That is not a neighborhood watch. That is a continental-scale movement-tracking infrastructure operated by a private company under contract law, not constitutional law.

The legal architecture here is the entire story. The Fourth Amendment protects Americans against unreasonable searches by government actors. Flock is not a government actor. When a police department queries Flock's database, it is purchasing a service — a distinction courts have only begun to wrestle with seriously, and one that the surveillance industry has exploited aggressively. Data brokers, private plate-reader companies, and fusion centers have collectively assembled tracking capabilities that would require a warrant if a single federal agency tried to build them directly. The workaround is contracting.

There is no federal statute that governs the collection and retention of license plate data in the United States. A handful of states have passed laws setting retention limits — how long a company can hold a plate read before deleting it — but enforcement is uneven and most states have nothing at all. Flock's own published data retention policies have shifted over time and vary by contract. What a homeowners association in suburban Texas retains may differ from what a mid-sized police department in Ohio retains, and neither of those residents has a simple mechanism for finding out.

What makes Flock specifically worth scrutiny — beyond its scale — is the nature of its customer base. Unlike a state DMV database or a federal law enforcement system, Flock's network is accessible to private entities: residential communities, apartment complexes, businesses. A property manager can run your plate. A suspicious neighbor with HOA board access can run your plate. The company's terms of service and contractual agreements are supposed to prevent abuse, but those are private documents, negotiated quietly, and audited by no one with real authority.

The HaveIBeenFlocked.com project is a form of adversarial transparency — using Flock's own data outputs, obtained through public records requests and other means, to build a lookup tool the company would never build itself. It is not comprehensive. It cannot show you every time a camera photographed your vehicle or every agency that has access to your location history. What it can do is demonstrate concretely — with your own plate number as the test case — that this infrastructure exists, that it is active, and that it has already been used to search for people who never consented to being searchable.

The deeper issue is not any single query or any single camera. It is the normalization of persistent location surveillance as a default condition of driving on public roads, implemented through private contracts that bypass the oversight mechanisms that would apply if government built the same thing directly. The check-your-plate tool is useful. But the correct response to learning you've been tracked is not relief that now you know — it is asking why an infrastructure this powerful was built with this little democratic input, and who is deciding how it grows.