Yes, Workspace ONE can track location but it is disabled by default. Its purpose is to cover specific use cases like protecting sensitive company data, help a field service technician. For instance, you may want to wipe the device if a technician forgets it onsite after leaving. In order to add an additional layer of segregation on the administrative side, Workspace ONE introduced "Privacy Guard", a new administrative “Privacy Officer” role that has access to view devices and system settings that affect users with full editing rights around privacy.