As far as I can tell, this happened between 2017-2020, so things have changed a little bit. You’re correct in that the second setting only allows an app to quer

As far as I can tell, this happened between 2017-2020, so things have changed a little bit. You’re correct in that the second setting only allows an app to query native location data from the OS when the app is open but: 1) I’m assuming that’s not the scope Tim hortons asked for with their permission dialog (they lied about it, sure, by saying they would only use your location when you were using the app, but they presented the user with a prompt that granted them unfettered access). I’m guessing most users didn’t even notice, or aren’t aware of the consequences. 2) they relied on some sketchy third party company called “radar,” and I’m sure they also use heuristics beyond location data to figure out where the users are. I’d love to know if the changes apple made with iOS 14.5 would have made this more difficult? Anyway, this is disgusting and I wish there were serious, unavoidable repercussions. (Disclosure: I only skimmed the actual report, I didn’t read the whole thing)