In essence, Google's privacy policy allowed Google app A to grab location data from Google app B, even if you disabled location services from A but not B.
@kyle Just plain deceitful and nasty.
@kyle figured it long ago on my own experience in Ingress game which is able to pick the location unless you really turn it off and spoof location. Stopped using it afterwards.
It reminds me of standard NSA denials on spying in a particular way "in this program" because they use a different program to do that.