There was a good NYTimes piece about it a few years ago. It’s easier than you’d think. If you know the target’s home address you can track the devices that come from there, and everywhere they go. On weekdays they’re probably going to work, which is also quasi-public info.