Penalties: Under 18 U.S.C. § 1030 (Computer Fraud and Abuse Act), unauthorized access to location data can result in 10+ years imprisonment and $250,000+ fines.
For more advanced and potentially accurate tracking, consider cellular network-based tracking or using GPS tracking apps. However, these usually require access to the target device.
What you might find:
Again, this is public record reconstruction, not hacking.
If you need to find a phone's location:
When a phone searches for a known WiFi network (e.g., "Starbucks WiFi"), it broadcasts the phone's MAC address. If you know the target's MAC address (obtained via previous interaction or ARP spoofing on a shared network), you can track their physical movement.
Kali Tools:
sudo airmon-ng start wlan0
sudo airodump-ng wlan0mon
# Look for probe requests containing the target MAC
Free location via triangulation: Use three Kali machines with GPS dongles to triangulate the signal strength. This is time-intensive but entirely free and offline.