Skip to content

Privacy & Surveillance

Raven AI matches indoor photos to property listings

According to Malwarebytes and 404 Media, the Los Angeles Police Department and the Miami-Dade Sheriff's Office have obtained access to the Raven tool for investigative work.

https://breach-signal.com/privacy/raven-ai-matches-indoor-photos-property-listings/

Share

Key facts

  • The Los Angeles Police Department and the Miami-Dade Sheriff's Office have obtained access to the Raven tool for investigative use.
  • Privacy experts warn that the tool could be misused for stalking or harassment, noting that earlier users of GeoSpy asked for help tracking women.
  • Raven includes a HotelID feature that can identify the hotel where a photo was taken from a single interior image, according to Daniel Heinen's social media posts.
  • Raven can use email addresses to locate publicly posted photos linked to accounts and then search those images for location clues.

Raven AI can match an indoor photo to a specific property by analyzing visual clues in the image, without needing GPS data, according to Malwarebytes and other reports.

Privacy experts warn that someone could misuse the technology for stalking or harassment. They note that earlier users of GeoSpy asked for help tracking women, a concern highlighted by Malwarebytes and Yahoo Tech.

In August 2026, Graylark Technologies raised $10.7 million in seed funding, with backing from General Catalyst, AI Grant, Alexandr Wang and Recorded Future. Daniel Heinen said on X that Raven is offered only to enterprise, government and law‑enforcement clients.

Recommended protective steps include cropping distinctive features before posting. Recommended protective steps also include limiting the audience of social posts, reviewing old property listings for removal of interior photos, and stripping EXIF data when sharing images. Mezha observes that Raven’s effectiveness hinges on the existence of comparable listing images for a given property.

Heinen added that the tool is not offered to the public or private consumers. Heinen also noted in his social‑media posts that Raven incorporates a HotelID function capable of identifying the specific hotel shown in a single interior photograph.

From a picture of a car’s interior, Raven can determine the vehicle’s make, model and year. The platform can also take an email address, locate publicly shared photos linked to that account and then scan those images for location clues.

The Short‑Term Rental ID component of Raven scans millions of rental listings worldwide. It uses only an interior photograph or a video frame to attempt to match the visual pattern of a room against the large database of property images, according to Malwarebytes and Mezha.

A hand holding a smartphone displaying the Airbnb logo in front of a modern apartment interior.
A smartphone displaying the Airbnb logo is held in front of a modern apartment interior, symbolizing the visual matching of short-term rental properties. Photo by InstagramFOTOGRAFIN on Pixabay

Complementing these tools, Raven’s Find Property feature allows users to submit either an exterior or an interior photograph—or both—to search for matching listings. The service operates in the cities where Raven is currently supported, as explained by Malwarebytes. When analyzing an indoor photo, Raven looks for distinctive visual characteristics such as the placement of appliances, the flooring type, the cabinetry style and the room layout.

It then compares those elements to images in property listings to locate a match, a process detailed by Malwarebytes and Yahoo Tech. Before Graylark restricted access to enterprise and government users, its predecessor GeoSpy was openly available to the public. They note that earlier users of GeoSpy asked for help tracking women, a concern highlighted by Malwarebytes and Yahoo Tech.

According to Malwarebytes and Mezha, Airbnb told 404 Media that it has no relationship with Graylark. Airbnb emphasized that its terms of service prohibit data scraping and said it is investigating whether any of its listings have been harvested for use with the Raven platform. Mezha and Yahoo Tech report that Zillow declared data scraping a violation of its terms of use.

Zillow warned that it would pursue legal action if necessary to stop unauthorized harvesting of its listing photographs. Vrbo did not respond to a request for comment about Graylark’s use of its data.

Malwarebytes cites a George Mason University study that found roughly eighty percent of federal sex‑trafficking cases active in 2018 and 2019 involved exploitation at hotels or motels. Daniel Heinen references this statistic to justify employing Raven in trafficking investigations. Even after stripping location metadata from an image, Raven can still infer a dwelling’s whereabouts by matching visual details in the image.

It notes that rooms without publicly posted counterparts are much harder for the system to match. Legal analysts raise questions about whether automated collection of data from rental platforms for use by law‑enforcement tools like Raven violates the platforms’ terms of service. They also wonder what judicial process would require conducting an interior‑image search, a point noted by Yahoo Tech and TechSpot.

Was this helpful?

Join the discussion

Please read our Comment Policy before commenting. First-time comments are held for moderation. By posting a comment you agree to our Terms of Use and Privacy Policy, which explain how your name, email address and comment are used.

Your email address will not be published. Required fields are marked *