There's a database called herrevad, that can be found in /data/data/com.google.android.gms/databases. This database contains timestamped entries about (some of the) app activity of the phone. The interesting thing is that you can get the Access Point ID (SSID/Cell ID) to which the phone was connected in different moments. The Cell ID field, however, is encoded and I have not found any documentation on how to obtain the relevant data that would allow me to get the location of the Cell. So far I have only been able to recover the MCC and MNC by base64-decoding the string contained in the field, but I cannot find the Area Code and Cell ID that would allow me to geolocate the cell (by using https://location.services.mozilla.com/, for example).
I'm wondering if any people around here has gone through this and knows how to do it.