They use those methods: webetc leaks, scanning wifi around and matching with their gps positions. Using your gps without telling. Try this to check ipleaks.net .
Sometimes you can override successfully position detection setting manually a custom position in your browser settings