[General Questions and Answers] GalaxyA325G:
Thanks for trying to help out as this is an important question to ask given our privacy is at stake...

It does us no good to spoof GPS (i.e., our longitude, latitude and altitude) if the next-door neighbors' Wi-Fi is reporting exactly where we are... (i.e., their BSSID, SSID, GPS and dBm).

Or if the IP address geolocation is also reporting close to where you are...

Thanks for that datum.

If I understand you correctly, your VPN server's IP address is geolocating to, oh, say, the middle of Moscow - but apps can still find your real location, e.g., you can route on a Google Map because they're using your GPS location and/or the location found by precise determinations based on nearby access points.

If that's what you're saying, then that makes perfect sense to me because your IP address isn't part of the Mock Location apps (as far as I know).

But maybe it is?

I don't know.

That's why I'm asking... :)

BTW, I realize most of us are on the Internet 24/7, but offline routing, for example... doesn't use the Internet but it would use the mock location.

But you do bring up a good question which is, for geolocation privacy, there are not two items that must be spoofed, but three (actually four!)...

GPS (latitude & longitude & altitude)

Wi-Fi APs (BSSID/SSID/dBm/GPS)

IP address (geolocation to the ISP's datacenter)

Worse... the cellular provider can triangulate by cell tower offsets!

Drat. The plot thickens... :)

Actually most Android phones are not properly set up for privacy in that they report four critical pieces of data to the Google public Wi-FI AP database, and to that of the others (such as Mozilla, WiGle, Netstumbler, etc.) .

Poorly set up Android phones generally report at least four things about every access point they can "see" (which is why my home APs are not broadcasting the beacon)...

The AP

unique

BSSID

The AP

unique

latitude & longitude

The AP SSID (often non-unique)

The AP signal strength (in dBm)

Note: My non-rooted Samsung Galaxy A32-5G is properly configured to NOT report that data - but most people are extremely rude in that they upload YOUR UNIQUE LOCATION INFORMATION to these databases without asking your permission whenever they are driving by your home.

Likewise my home router is properly configured to NOT supply that data so the thousands of extremely rude people who drive by my house do NOT upload my unique data to the public servers listed above.

Drat. I hadn't even considered ip address geolocation, which I knew was a thing but I had forgotten about that.

What I need to figure out is what the heck is that "Spoof Wi-Fi Provider" option is doing in the Lexa app.

We know it's not related to the GPS spoofing

[The app spoofs latitude, longitude & altitude]

[Using the GPS radio!]

So is it spoofing a nearby access point?

[SSID/BSSID/dBm/GPS]

[Using the Wi-Fi radio!]

Or is it spoofing the IP address geolocation?

[Which is typically the ISP's datacenter]

[Using the cellular-data radio!]

We can be pretty sure it's not spoofing cell tower triangulation

[This may be possible in some cellular-debugger apps though]

[Using the analog-cellular radio!]

I don't even know which radio the option is spoofing.

:(