Maybe where the data originated? So, if you are a EU citizen, but use a google device in the US on vacation, is the data generated in US bound by US-only regulations, so no GDRP?
"The Guidelines note that the processing of personal data of EU citizens that takes place outside the EU will not trigger the GDPR so long as the processing is not a specific offer directed at individuals in the EU or to monitor their behavior in the EU."
So it may be safe for google...but given it would apply to a user profile in general, including EU, maybe not?
The location of the data does not matter.
The origin of the data does not matter.
Citizenship does not matter.
These are the reasons many US firms tried to call GDPR overreaching. However if it didn't apply in this way there would be too much wiggle room to be effective.