Yep... All carriers do this, they just haven’t got caught yet. Any app that requires location access permission is tracking and logging it in real time. Useful “weather apps” and “GPS apps” are the worst violators. Where you work, where you shop, where you live, where your kids go to school...
Ever wonder why all that shows up are ads for competing pharmacies right after you just visited a pharmacy? Or competing grocery store ads right after you just went grocery shopping?
Turn off all permissions for all apps, the convenience is not worth the lack of privacy.
I set mine to only when in use if I use an app.
I use very few apps.
Don't assume that turning off permissions will actually deny access to the information.