A lot of that information is publicly available. All they did was have systems built to scrape, organize, and link that data together. US IP address blocks are known and MAC address databases by vendor are also easy to find. You can geo-locate most IP addresses.
The cellular data gets more tricky, but 3rd party apps tracking your info sell that data. That's partly how 2000 mules collected their data.
A lot of that information is publicly available. All they did was have systems built to scrap, organize, and link that data together. US IP address blocks are known and MAC address databases by vendor are also easy to find. You can geo-locate most IP addresses.
The cellular data gets more tricky, but 3rd party apps tracking your info sell that data. That's partly how 2000 mules collected their data.