> There is zero reason for an ad to be using the Geolocation API. IP-based geolocation is more than enough.
There was also zero reason for billboards by highways, before there were highways. :)
Obviously this is all a sliding scale and has nuance, but I'd say ads should not be using anything that is behind a permission prompt, like geolocation. Tremendously hostile to both the user and the site hosting their ad.
I mean, for all you know, I'm in a domestic abuse shelter. Are you going to take responsibility for my well-being if your clients' database gets leaked? And are you confident that your clients know how to competently secure a database if they can't even use HTTPS?
edit: Sorry, partial post due to accidentally hitting enter.
More than likely they'll just correlate browsing habits with location and sell that information to third parties, though. High quality advertising is just not in this reality.