> How would they access location data unless authorised by the user?
> > Correlate devices that visited geofence addresses (using LiveRamp data)
LiveRamp is hooked into a lot of ad services and a user's location information will routinely make its way to them. Played some ad-supported mobile game on your phone while in the Doctor's waiting room? LiveRamp has that location data.
Even if the user doesn't have GPS enabled for the game, they might have it enabled for some other background process that routinely asks for it, like Facebook or Twitter or FourSquare, who package that data for sale. Or you're on the Doctor's wifi, and most stable IPs like that are in location databases. Or they just buy it off your cell phone provider, since many happily sell location information.
LiveRamp is a gigantic business built entirely on knowing approximately where you are any time you interact with their tracking servers.