In the summer of 2016, a 28-year-old software engineer in Bangalore walked through Cubbon Park with his phone held high, chasing a virtual Pikachu.

He did not know, and neither did the hundreds of millions of Pokémon Go players across India, that the 360-degree sweep of a park pathway, a building alcove, a pedestrian bridge, was being absorbed into a neural network that would someday guide autonomous military drones through GPS-jammed war zones.

Eight years later, that same dataset, roughly 30 billion scans from players worldwide, including millions from Indian cities, became the training substratum for a Visual Positioning System, VPS, now entering American defence-contractor platforms for battlefield navigation. Niantic, which made it possible, has achieved Awardable status in the Pentagon procurement marketplace and partnered with Vantor, formerly Maxar Intelligence, a $70 million contractor to the U.S. National Geospatial-Intelligence Agency, for field testing in early 2026.

This is not a breach, not a hack, not some naughty child entering the server room through a forgotten window. It is more consequential: an architected dual-use passage from consumer gaming to military-grade spatial intelligence; and it asks how India protects its citizens, infrastructure and strategic data when every camera-bearing smartphone is a potential sensory organ of a global intelligence animal.

The comforting story says Pokémon Go accidentally made a military-useful map. So it be; comforting stories are also maps, only drawn to hide valleys. Niantic's spatial database did not begin with Pokémon Go in 2016. It began with Ingress, the augmented-reality game launched in 2012, whose players were incentivised to walk millions of kilometres, chart walkable paths, submit geotagged photographs of real locations, and manually vet points of interest. That database became Pokémon Go's backbone, and later, the training material for VPS.

In 2020, Niantic introduced AR Mapping tasks. Players received in-game currency for recording 360-degree video scans of specified locations. The terms of service granted Niantic a transferable, sublicensable licence to this footage, wide enough to hold resale to third parties, including, eventually, defence contractors.

Players, innocently played 'only a game' but the game was doing what no military survey team could do so cheaply, so silently, so cheerfully. Google Street View, strapped to cars, misses pedestrian-only zones; Niantic's players mapped footpaths, building interiors and urban micro-terrain, the exact ground-level detail drones and robots need inside dense cities where GPS is jammed or absent. By 2022, Niantic had mapped over 100,000 VPS-activated locations, using Structure from Motion algorithms that turn raw smartphone video into dense, metric-scale 3D point clouds, spatial models by which machines calculate trajectory, avoid obstacles and identify targets.

The military utility became crystalline in December 2025, when Niantic Spatial, spun off after Niantic sold its gaming business to Saudi Arabia's sovereign wealth fund for $3.5 billion, announced a partnership with Vantor. The integration joins Niantic's ground-level VPS with Vantor's aerial Raptor navigation software, allowing a drone in the air and a person or vehicle on the ground to exchange coordinates in real time, even when GPS signals are unavailable. Vantor's materials name autonomous drones, vehicles, augmented-reality glasses and other field assets as platforms.

Brian McClendon, Niantic's Chief Technology Officer and former lead of Google Maps, Earth and Street View, has been plain about defence use. VPS, he said, suits robots operating where GPS regularly drops out, such as dense cities, and where signals are deliberately blocked, such as war zones. The system claims centimetre-level accuracy without satellite triangulation, addressing the GPS-denied warfare problem, the central constraint of electronic warfare seen daily in Ukraine and the Middle East.

The corporate separation of games from maps was not incidental. It was ethical compartmentalisation, built like a corridor with clean doors: Pokémon continues under Saudi ownership; Niantic Spatial pursues defence contracts without the warm, cartoonish, consumer face. The data still moves through old pipes. Only the paint on the pipes has changed.

The most disturbing element is not the technology but the asymmetric consent architecture beneath it. India's Digital Personal Data Protection Act, 2023, requires explicit, informed and specific consent for data processing; but even this may be too small a bowl for uses that mutate across years and domains no player could anticipate. Niantic's privacy policy says data may improve products and services and be shared with business partners. The sentence is elastic enough to contain defence partnerships without ever naming them.

Iris Muis of Utrecht University observed that a user cannot picture how their data may be used later; in five years there may be an application whose effects he fundamentally rejects. The attribution problem then deepens. Once training data enters an AI model, it is mathematically irretrievable, a footprint melted into weather. Vantor told Trouw it would not use Pokémon Go data going forward, but declined to say whether the model was already trained on those scans. Niantic admitted scans trained an early version of its navigation model. Jeroen van den Hoven of TU Delft noted that AI models begin with a dataset, then absorb far more, until original contributions blur into untraceable patterns. If there is an ethical injury, it is permanent.