On Android, Xprivacy uses hooks provided by Xposed to "MitM" a lot of functiom calls. Don't want an app to know your phone's serial number? That function call returns a spoofed one. Same with GPS location.