The Facebook contact informed me that they always use geoip to set the ['user'] ['country'] attribute in the signed request. For other areas, such as post-targeting, many signals are used to best determine the user's country. IP address, checks + self-determined location in the algorithm.
source share