Similar functions such as Samsung "find my mobile" & Android "find my device" do this, but they both have 2 pre-requisites:
1: The facility is enabled on the device in question - thus user consent is achieved.
2: The website on which the tracing is done, is password-protected, hence further user-consent is confirmed.
This process cannot be achieved without that user consent being inplace.
