If you have an iPhone or iPad, your movements have been tracked without your knowledge and, likely, without your explicit consent. Security researchers Pete Warden and Alasdair Allan recently discovered a hidden file on the devices which keeps track of a user’s latitude and longitude and a timestamp of the user’s movements. When extrapolated, the data becomes a roadmap of a user’s movements for months – a scary proposition given how valuable the information could be to a stalker or jealous ex.

The file, labeled “consolidated.db,” seems to have come into effect with the start of Apple’s iOS4 update, which was released in June 2010. According to Warden and Allan, the tracking file is unique to the iPhone and is not present on other popular smartphones.

Given the seeming secrecy of the file, is it fair to say that Apple betrayed the trust of its users? Perhaps, but one should also consider that the users gave their consent to share the data, though perhaps unknowingly. As this article in the Guardian newspaper illustrates, Apple customers already agreed to sharing their location data when they accepted their iTunes agreement.

“Apple can legitimately claim that it has permission to collect the data: near the end of the 15,200-word terms and conditions for its iTunes program, used to synchronise with iPhones, iPods and iPads, is an 86-word paragraph about “location-based services”.

It says that ‘Apple and our partners and licensees may collect, use, and share precise location data, including the real-time geographic location of your Apple computer or device. This location data is collected anonymously in a form that does not personally identify you and is used by Apple and our partners and licensees to provide and improve location-based products and services. For example, we may share geographic location with application providers when you opt in to their location services.’”

Warden and Allan have created a website that explains some of the technical specifics of the file and offers answers to some common questions.

In the meantime, weigh in on Twitter and tell us what you think of this privacy faux-pas.