Privacy challenges in third-party location services