How eSIM Technology Works and What Data It Exposes
An eSIM (embedded SIM) replaces the plastic chip with a carrier profile downloaded straight into a secure element soldered inside your phone. Understanding how activation works clarifies what a privacy-focused seller can and cannot protect.
The moving parts
- eUICC — the reprogrammable secure chip in your device that stores one or more carrier profiles.
- SM-DP+ — the carrier's provisioning server. Your QR code is essentially the address of this server plus a one-time download token.
- ICCID — the serial number of the downloaded profile.
- IMSI — the subscriber identity the network uses to route your traffic.
What the carrier network necessarily sees
Once you connect, the mobile network knows your ICCID/IMSI, your device's IMEI, and which cell towers you touch — that is inherent to how cellular works, with any SIM from any seller. What is not inherent is the link between those identifiers and you as a person. That link is created at the point of sale — by ID checks, card payments, and account records.
Where PRIVASIM breaks the chain
We remove the point-of-sale linkage entirely:
- Payment arrives from a crypto wallet, not a named card.
- No account or email joins your purchase to an identity.
- We store your ICCID and activation code encrypted (AES-256-GCM), keyed to a random order ID that lives in your browser.
So while the network sees "a device with profile X connected in Tokyo," neither the carrier nor anyone else can resolve profile X to a name. That's the practical meaning of an anonymous eSIM.