Understanding App Location Permissions on Mobile Devices