
Image: Youtube Screenshot
Canadian YouTuber Anthony Sistilli built a basic license-plate reader and aimed it at police vehicles instead of everyone else. On September 20, 2026, two Peel Regional Police officers came to his home near Brampton, Ontario, and stayed about 30 minutes. They asked what he planned to do with the data and said mapping police movements could put officers at risk or help people committing crimes. He had not published plates or officer identities. No charges followed. His account of the exchange, in a video that passed 1.6 million views, was the line citizens already use about Flock Safety: what are you going to do with the records?
What He Built Was Not Flock
Sistilli told Straight Arrow News the rig was a cheap Amazon camera, a laptop, and machine-learning code written in about 20 minutes. It tried to read a plate only when the vehicle looked like a police car, then stored the plate, a photo, the time, and a GPS point in a private database. He tested it near local stations. That is not Flock’s commercial network: no AWS government cloud, no interagency search, no 20 billion monthly captures. The comparison he was testing is narrower. Location-linked vehicle records raise the same movement question no matter who holds the camera.
Peel’s stated worry was officer safety. The visit still treated a private database of squad cars as a problem worth a doorstep, while the commercial system that logs civilian cars by default does not get the same knock.
What the Commercial System Keeps
Flock’s published policy says its cameras collect plate images, vehicle images, make and color, plate number and state, date, time, and camera location. Searches are logged with a stated purpose. The company says customers own the data, decide whether to share it, and that Flock does not sell it. Storage is in Amazon Web Services’ government cloud. Deletion is an automated S3 lifecycle policy, seven days by default, longer or shorter if a contract or a statute says so. Garrett Langley wrote in August 2026 that the old default was 30 days and that more than 90 percent of searches without a full plate happen inside a week. Existing customers keep whatever retention their contracts already set. Evidence Mode lets detectives park specific hits in cold storage past the default window.
Seven days is not nothing. A week of hits can still show a commute, a clinic, a church, or a house. North Jersey reporting and civil-liberties filings have made that point for years: the record is of the car, and the car is how people move. A hit in one city can be queried from another. The driver is not notified.
The Audit the Citizen Does Not Get
Flock has answered part of the scrutiny with shorter defaults, search logs, offense filters on shared access, and abnormal-activity reviews. Those are vendor controls. They are not a warrant rule, and they do not give the person in the car a real-time way to ask what a search was for. Sistilli’s officers could ask him. He could not subpoena the network that watches his street.
Brampton has been installing its own plate readers and 360-degree cameras at intersections. The tools for a hobbyist copy are now cheap enough that a laptop can imitate the logic. The legal split has not moved with the hardware. Police can contract a cloud that retains plates on a rolling clock. A resident who points a camera back gets a visit about intent. The data question is the same one Sistilli says he put to the officers: who collects vehicle locations, on whom, and for how long, and who is allowed to ask.




