> I think I'll start from just pointing to California Penal Code 637.7

I would strongly advise not doing that until you can prove that this was in fact a tracking device. I think a remote start/cutoff is much more likely, c.f.:

https://hackernews.hn/item?id=32040472