> enough samples that you can apply statistics to find precise locations, in many cases you can de-anonymize the IDs
I think a lot of people don't realize the power of a big enough sample size. With enough samples even something pretty innocent looking like your daily step counter could make you identifiable.
As far as I know we don't have large enough databases to make this happen in practice, but I don't think this is impossible in the future.
How large are you estimating is "large enough"?