Perhaps.

But if these are popular apps / APIs, then the number of affected households is significant. Authorities / investigators will have to treat IPs as likely proxies and not the geolocation of the human initiating the request.