Tweet · 26 Nov 2018, 19:07 UTC

The OS has full control over whether and how location data is shared, and it has direct access to (and trust from) the user. I can’t see an interpretation of the GDPR in which it isn’t a joint controller.