Privacy policies are irrelevant here. They are picking up unique data as your phone communicates with a cell tower. You can do it with a $15 RTL-SDR receiver.

Get a hundred receivers and you can pinpoint anybody in a city.