I don’t believe the buggy API was ever restricted just to US IPs, so anyone in any country could have been tracking US phones since the API came out (in Jan 201

I don’t believe the buggy API was ever restricted just to US IPs, so anyone in any country could have been tracking US phones since the API came out (in Jan 2017 or earlier).