I don’t believe the buggy API was ever restricted just to US IPs, so anyone in any country could have been tracking US phones since the API came out (in Jan 2017 or earlier).