A mobile communication device for avoiding location exposure in a User Equipment (UE) information procedure includes a wireless transceiver configured to perform wireless transmission and reception to and from a service network. The device further includes a controller, configured to determine whether a Radio Resource Control (RRC) security has been activated between the mobile communication device and the service network, and in response to the RRC security not having been activated, does not send a measurement report to the service network via the wireless transceiver after receiving measurement configuration message, wherein the controller is further configured to send the measurement report after the RRC security has been activated.