For what purposes are you allowed or prohibited to access user location data? Which external firm is auditing the access to user location data? Where are the pu

For what purposes are you allowed or prohibited to access user location data? Which external firm is auditing the access to user location data? Where are the public reports of these audits?