Are user location credentials often accidentally exposed in other app's APIs? This isn't something I have much knowledge in and am just wondering how often this is a security issue.