A misleading location-tracking practice ensnared the search-engine giant in massive privacy case spanning 40 states.