A Service Area Business on Google Business Profile hides its street address and the map pin location from public view, by design, because it serves customers at their own location rather than a storefront. Yet the profile’s underlying “suggest an edit” pathway still accepts a new address and a new map pin submitted by anyone. That mismatch is the story.

Mika Lepisto, a moderator at The SEO Community, described the gap on LinkedIn. “I found a local SEO negative attack for Service Area Businesses where users can submit a change of address and map pin, even though the UI for these businesses hide it,” Lepisto wrote. Search Engine Roundtable’s Daily Search Forum Recap surfaced the post on July 21.

The mechanism matters more than the discovery. Google built the Service Area Business format so plumbers, electricians, HVAC contractors, cleaners, and mobile technicians could rank without exposing a home office or a residential address. The field disappears from the owner’s own dashboard. The submission form for public edits was never disabled for that same field. A competitor, a disgruntled customer, or an automated script can move the pin without the owner seeing a request, an approval prompt, or a notification tied to a hidden field.

How close a business sits to the searcher remains one of the strongest signals in local ranking, alongside relevance and prominence. Moving a business’s map pin ten miles away does not just dent a ranking factor; it can remove the business from the local pack for every nearby query it used to win. For a storefront, an owner would notice a pin drift on a map they can see. A Service Area Business owner has no equivalent view, because Google decided that view should not exist.

The timing sharpens the risk. Google is folding Local Services Ads into the broader Google Ads platform this year, building a Performance Max campaign type specifically for pay-per-lead goals. That migration syncs automatically with Google Business Profile data. If location data that feeds paid lead delivery comes from the same profile record a stranger can edit, a hijacked pin stops being only a local-pack problem. It becomes a paid-spend problem too, corrupting both organic visibility and the leads a business pays Google to deliver.

None of this is confirmed as a platform bug. Google has not commented on Lepisto’s post, and Search Engine Roundtable’s recap presents it as a practitioner finding rather than an acknowledged flaw. Treat it as a documented vector until Google says otherwise, which is a meaningfully different claim than saying Google is broken.

That distinction should not change what a Service Area Business owner does next. Since the address field is invisible in the dashboard, monitoring has to happen outside it. Pull the public-facing Business Profile listing and the Maps pin position directly on a recurring schedule, rather than trusting that a quiet dashboard means a quiet profile. Watch the profile’s edit history and any notification tied to user-suggested changes, and treat an unexplained shift in local-pack visibility as a reason to check the pin, not just the ranking.

Search Engine Roundtable’s Daily Search Forum Recap for July 21, 2026, written by Barry Schwartz, first surfaced Mika Lepisto’s LinkedIn post.