And, triangulating client's public IP address will also give away location with decent precision: https://news.ycombinator.com/item?id=37507355

btw, we need a securephones.io [0] part 2 focusing on apps.

[0] cert has expired