I remember the early days of Tinder when they would allow unauthenticated API calls from anywhere and returned location information accurate to a few feet.

This doesn't seem like much has changed.