correct, but according to job notes, we should ask user for location permission on signup