Comment by kevcampb

I'm not clear if you missed the point here? This isn't aggregate data, it's obtaining the location of a specific individual just by knowing their phone number. It can be done without their knowledge or consent.

By your webserver analogy, the equivalent would be more akin to google publishing the contact details and search queries of anyone using the service.