Turning the GPS on requires user interaction as a security measure. If any application were able to turn the GPS on without the user knowing, that would be a very big privacy concern.
It looks like the application do it they are most likely now exploiting a security flaw to accomplish this. It...