CDC purchased (is still purchasing?) cell-phone location data to track compliance with COVID-19 restrictions, often from less-than-secure vendors.
https://www.vice.com/en/article/m7vymn/cdc-tracked-phones-location-data-curfews
It's not paranoia if they really are out to get you