With an IP address(I doubt most people surf with TOR all the time), system time(Comparing time-zone data), language settings, and the myriad of other data given away a person can get ~close enough~. Even then, if you don't want to use the app don't allow it to send/recieve GeoData easy enough.