It could be done in a such a way that no device identifier or any other identifier is ever sent. Just (time, current lat/lng, previous lat/lng)