Big Box Retail & Malls

Most retail teams already have traffic numbers. Door counts, till receipts, queue times, a dashboard somebody opens on Monday. What they usually cannot answer is the next question down: which part of the store did that visit actually touch, in what order, and for how long. That answer does not come from a counter at the entrance. It comes from a device that knows where it is standing, which means it comes from a piece of software inside your app.
That piece of software is a location SDK, and it is the component that decides whether retail location intelligence is a real operating input or a slide. This article covers what the SDK does, how indoor positioning differs from the GPS your phone uses outdoors, which radio technologies reach which level of detail, what the privacy rules require before any of it is allowed to run, and the specific questions worth asking a vendor before you commit engineering time.
What is a location SDK?
A location SDK is a code library you add to a mobile app so the app can work out where the device is, indoors as well as outdoors, and react to that position. It handles the sensors, the signal maths and the map geometry so your developers do not have to.
The name gets used loosely, so it helps to separate three things that often ship together. A maps SDK draws the floor plan. A positioning engine works out the blue dot. An analytics layer aggregates many blue dots into zone dwell, path and conversion figures. A single vendor may supply all three, but they fail in different ways, and they are priced and tested differently.
| Usually inside the SDK | Usually still yours |
|---|---|
| Reading radio and inertial sensors | The permission prompt and its wording |
| Position estimation and floor detection | Screen design, branding, accessibility |
| Geofence and zone entry events | What the app does when an event fires |
| Map rendering and route drawing | Product data, stock, pricing, promotions |
The split in that table is the one that surprises teams during integration. The SDK can tell you a shopper entered the seasonal aisle. Deciding that this should push a notification, or log an event, or do nothing at all, is a product decision nobody can take for you.
Why does GPS stop working once a shopper walks inside?
Because GPS needs a clear view of satellites, and a roof removes it. The U.S. government’s own figure is that GPS-enabled smartphones are accurate to within a 4.9 m radius under open sky, and the same page notes that accuracy degrades near buildings and other obstructions (GPS.gov accuracy page, accessed October 2026).
Indoors, two things happen at once. The direct signal is attenuated by the structure, and what does arrive has often bounced off steel, concrete and refrigeration units first, so the receiver measures a path longer than the real one. A 4.9 m radius under open sky is already wider than a supermarket aisle. Multipath indoors makes it worse, not better.
This is the whole reason indoor positioning exists as a separate field. It substitutes signals that are already inside the building, plus the phone’s own motion sensors, for satellites that cannot be seen. The practical consequence for a retail app is that your outdoor code path and your indoor code path are not the same system, and the handover between them at the door is a thing you will have to test deliberately.
Which positioning technology should a retail app use?
There is no single answer, and any vendor who gives you one without asking about your building is selling, not scoping. The choice is set by how much detail the decision needs, what hardware the site will tolerate, and who maintains it in year three.
| Technology | What the building needs | Where it fits |
|---|---|---|
| Bluetooth Low Energy beacons | Installed, powered or battery hardware | Zone and aisle detail, retrofit sites |
| Wi-Fi ranging and signal strength | Existing access points, known positions | Floor and area detail, no new hardware |
| Ultra-wideband | Dedicated anchors, tight install tolerance | High-precision tracking, smaller footprints |
| Magnetic and inertial sensor fusion | Survey of the building, little or no hardware | Continuous position between fixes |
Beacons get criticised in this market, often by people selling something else, and the criticism is only half fair. Battery replacement across a large estate is a genuine operating cost, and a dead beacon degrades positioning quietly rather than loudly. But in a leased unit where you cannot touch the network, with a landlord who will not share access point coordinates, a beacon layer you own outright is sometimes the only option that gets to production. State the trade-off rather than pretending it away.
Ultra-wideband is the opposite case. It reaches a precision the others do not, and for tracking high-value stock or equipment that precision earns its install cost. For telling you which half of a shop floor a shopper lingered in, it is more infrastructure than the question requires.
What does indoor location data actually change about store performance?
It changes which decisions can be made from evidence instead of opinion: staffing against the hours and zones that are actually busy, placing promotions where feet already go, and shortening the distance between a shopper looking for a product and finding it.
Physical retail is still where the money is spent. E-commerce has run at roughly 16% of total U.S. retail sales in recent quarters according to the Census Bureau’s Quarterly Retail E-Commerce Sales series (accessed October 2026), which leaves the large majority of spending happening inside buildings whose interiors are measured far less carefully than any website.
Four uses pay for themselves before anything clever happens. Staffing to measured peaks rather than remembered ones. Checking whether an endcap changed the path or just the photograph. Finding the zones where people stop and then leave without buying. And in-app wayfinding to a specific product, which is the one feature shoppers notice, because it removes the moment where they give up and order the item on their phone instead.
A caution that belongs in the same breath. An app-based SDK measures the people who installed your app and granted permission, which is a sample, not the whole door count. Treat it as a high-detail panel and keep your entrance counters for totals. Mixing the two up is how a dashboard starts lying.
How accurate does the positioning need to be?
Accuracy is not a specification you buy at the highest available grade. It is set by the smallest distinction your decision depends on, and paying for more than that is wasted install cost.
| The question you are answering | Detail required |
|---|---|
| Was the visitor in the building? | Building level |
| Which floor, which department? | Floor and area level |
| Which aisle, which bay? | A few metres |
| Where exactly is this trolley or pallet? | Sub-metre |
Floor detection deserves its own note, because vertical error is the one that quietly ruins a multi-level deployment. The regulatory reference point is useful here: the Federal Communications Commission’s wireless 911 rules use a z-axis metric of plus or minus 3 metres relative to the handset (FCC 911 location accuracy, accessed October 2026). Three metres is less than the floor-to-floor height of many retail buildings, and that is the standard emergency responders work to. If a vendor cannot tell you how their engine resolves floor, assume it does not.
Insist on one number from any pilot: error measured against a ground-truth walk, at the 95th percentile, not the average. Averages hide the failures. The 5% of readings that put a shopper through a wall are the ones your product team will be arguing about.
What privacy rules apply to location data in a retail app?
Location is treated as sensitive in every major regime, and precise location is treated as a special category in some of them. Under the EU’s General Data Protection Regulation, location data is named in the definition of personal data in Article 4(1), and the Regulation has applied since 25 May 2018 (Regulation (EU) 2016/679, EUR-Lex).
California goes further and puts a radius on it. “Precise geolocation” is defined in the California Consumer Privacy Act, as amended by the California Privacy Rights Act, as data used to locate a consumer within a circle of radius 1,850 feet or less, and it sits in the sensitive personal information category, with those provisions operative since 1 January 2023 (California Civil Code § 1798.140, leginfo.legislature.ca.gov).
Enforcement is not theoretical. In January 2024 the Federal Trade Commission issued orders against location data brokers prohibiting the sale and use of sensitive location data, including the action against X-Mode Social and Outlogic (FTC press release, 9 January 2024).
| Obligation | What it means in the SDK |
|---|---|
| Lawful basis and clear consent | Permission prompt, purpose string, a working refusal path |
| Purpose limitation | No onward sale or sharing you did not disclose |
| Data minimisation | Zone events where you do not need coordinates |
| Retention limits | A deletion schedule somebody actually runs |
| Accessible interface | Wayfinding UI tested against WCAG 2.1 Level AA |
The accessibility line is not padding. A wayfinding screen is a navigation aid, and if it is unusable with a screen reader it excludes the shoppers who most need directions. WCAG 2.1 became a W3C Recommendation on 5 June 2018 and Level AA is the usual contractual target.
There is an honest cost here. Asking for background location reduces opt-in rates, and a foreground-only design collects less data. That is a product trade-off to make on purpose, early, rather than discover when the numbers come in thin.
How do you evaluate a location SDK before you integrate it?
Score it on five things, in a pilot, in one of your own buildings. Vendor demo venues are surveyed and maintained to a standard your actual stores are not, so a demo tells you almost nothing about your estate.
| Ask this | Accept this as an answer |
|---|---|
| 95th percentile error on a walk test | A number from our building, not yours |
| How is floor resolved? | A named mechanism, not “automatically” |
| Battery drain per hour of foreground use | Measured on a mid-range Android handset |
| Behaviour with no network | Positioning continues, events queue and sync |
| Who surveys changes to the layout? | A named party, with a stated turnaround |
Then look past the engine at the operating model. Who re-surveys after a refit. What happens when the landlord changes the Wi-Fi. Whether map updates need a new app release or land over the air. How the data leaves the SDK, in what schema, into which of your systems. And what the exit looks like: if you stop paying, do you keep the floor plans and the historical data, or does the intelligence leave with the vendor.
Integration itself splits into four workstreams that run at different speeds: the building survey, the app integration, the data pipeline into your reporting, and the privacy review. The survey is usually the long pole and the one most often left out of the plan. The privacy review is the one most often started too late to change anything.
If you are weighing this for a real estate, the useful next step is a scoping conversation about your own buildings: what the sites are, what network and hardware already exist, which decisions you want the data to drive, and what a pilot in one store would have to prove. Book a scoping call and bring a floor plan.
Frequently asked questions
What is the difference between a location SDK and a maps SDK?
A maps SDK draws a floor plan and routes on screen. A location SDK works out where the device is, which is what makes the blue dot move and what makes zone entry events fire. Many products bundle both, but you can have a beautiful indoor map with no positioning behind it, and that distinction matters during procurement because the two are tested in completely different ways.

Does indoor positioning work without a network connection?
It can, and you should require it. Positioning uses radio signals and the phone’s own sensors, not an internet connection, so a well-built SDK keeps the blue dot alive in a basement with no cellular coverage by caching map data on the device and queueing analytics events until connectivity returns. Ask for this explicitly, then test it with the handset in airplane mode.
Can a location SDK count shoppers who never installed our app?
No. An app SDK measures consenting app users only, which is a detailed sample rather than a total. Treat it as a panel: excellent for paths, dwell and zone sequence, not a substitute for entrance counters when you need absolute visit numbers. Teams that conflate the two end up reporting a fraction of their traffic as though it were all of it.
How much accuracy should we ask for?
Only as much as the smallest distinction your decision needs. Department-level reporting does not need aisle-level positioning, and buying precision you will not act on adds install and maintenance cost for nothing. Write the decision first, derive the granularity from it, then ask the vendor to prove that granularity at the 95th percentile in your own building rather than in a demo space.
Is consent needed if we only use location inside our own store?
Yes. Being on your own property does not exempt you from data protection rules, because the obligation attaches to the personal data and not to the premises. Location data is personal data under GDPR Article 4(1), and precise geolocation is sensitive personal information in California. You need a lawful basis, a clear purpose string, a working refusal path and a retention limit.
