Good blog post in the privacy and national security (that's US national security) concerns of TikTok, by @malwaretech, who decided to have a look whether the app actually asks for location permissions https://malwaretech.com/opinions/tiktok-is-a-national-security-risk.html
I wonder if they have looked at this? (Third from the bottom)
https://penetrum.com/research