A single photo is all it takes: AI can now find out which hotel room you are staying in

What was previously considered a private retreat could lose its anonymity due to artificial intelligence. The US company Graylark has unveiled a technology that can determine a person’s location based on a single photograph taken in a hotel room or vacation apartment – even without GPS data. The technology is not only being offered to law enforcement agencies.

Boston-based Graylark has expanded its Raven AI identification platform with two new features. “Short-Term Rental ID” was launched on September 30, 2026, followed by “HotelID” on October 8. According to the company, a single interior photo or a still image from a video is sufficient to identify a vacation rental or hotel room. The software searches millions of accommodation listings and compares room layout, architectural features, furniture, and furnishing details with existing images. GPS coordinates or other location information in the image file are not required.

Graylark CEO Daniel Heinen explained that the technology can identify, based on a photograph, which Airbnb accommodation a criminal is staying in or which hotel someone has been staying at. On its website, the company presents a staged case in which Raven allegedly identified the location of a threatening livestream within seconds. Police officers were reportedly on the scene and arrested the person eight minutes after the livestream was uploaded. The company describes the presentation as a dramatized reconstruction of a real case. The software’s findings are explicitly considered investigative leads that must be verified before further action is taken.

From crime fighting to surveillance

Officially, Raven is intended to help find victims and solve serious crimes. However, its applications extend beyond this. Graylark states that it offers its platform to qualified law enforcement agencies, government bodies, and corporate clients. The company does not disclose which data sets and algorithms underlie its location tracking. Heinen also declined to provide detailed answers to International Cyber Digest’s questions regarding data sources and commercial partnerships.

The technology’s history explains why privacy advocates are alarmed. Raven is based on Graylark’s earlier geolocation tool, GeoSpy, which, according to the company, reached one million users within its first three months. In January 2025, the investigative news outlet 404 Media reported that publicly accessible features were being used, among others, by persons specifically seeking to track the whereabouts of certain women. Following inquiries, public access to GeoSpy was shut down. Simultaneously, 404 Media reported that law enforcement agencies such as the Miami-Dade Sheriff’s Office and the Los Angeles Police Department had already acquired access to the technology. One contract in Miami-Dade was reportedly worth $85,500.

The handling of uploaded images also raises questions. According to its privacy policy, Graylark stores images from simple search queries for seven days. Images associated with an investigation file remain stored until that file is deleted and are then retained for an additional 30 days. In August, the company also announced a $10.7 million funding round, led by General Catalyst. Investors also include Alexandr Wang and Recorded Future.

The real significance of this development lies in the fact that people no longer need to explicitly publish their location to potentially reveal it. A seemingly harmless vacation photo, a video from a hotel room, or a picture from a rented vacation apartment could be enough to reconstruct their location. Even removing all GPS data, on the other hand, offers no reliable protection.

This creates a significant potential for misuse: A technology that can help investigators search for missing persons or criminals could also be used to identify, track, and monitor journalists, activists, or private persons. Based on the company’s published information, it is not possible to independently assess how reliably Raven actually recognizes different hotel rooms and how frequently false positives occur.

yogaesoteric
October 21, 2026