On my Pixel 5 Garmin Connect is running in the background and getting the phone's location at all times. I can understand doing this on an hourly basis for weather etc, but this is 24/7.
Is it meant to do this? Are you absolutely sure about the integrity of the software following the recent hack? Given that passwords are saved in plain text I'm wondering if a bad actor has slipped something dodgy into the codebase.