I'm pretty sure they are just using your IP address which I personally think is totally ok. I tested this by asking "What time is it?" and it responded "It's currently xx:xx at [location]", and the location in the response wasn't my exact location, but the location I'd get after putting my IP address in one of those IP-to-Location websites.