Yes, but you will need to first correlate connection data from a ton of anonymous IPs, and then send tough guys to the site to check everybody's passports at a gunpoint.
Or you just correlate the data with known locations as the NYT did in the article when they tracked the inauguration singer by knowing where she was on a single day.
If you didn't know, Google even added a special API in Android for Apps to use to get device IDs, IMEI included. The very point of it is to allow tracking by Apps.
In Android 6 they even made a special callback result to indicate that the user has refused to give his permission rather than indicating that modem/phone ID wasn't found.
Clearly they are aware of this and do that deliberately.
No way to underestimate how important this is.
Second to it, you guys need to push for removing tracking infrastructure that Google shoves into Android.
Not a single application should be allowed access to anything amounting to a "Device ID" or fingerprinting method, implicit or explicit