Option 1: comply with LE+owner's request; they have a chance to recover vehicle; costs are low and bad PR is avoided.
Option 2: don't comply with LE+owner's request; deal with later warrant at higher cost (now you have compliance & legal involved); vehicle is not recovered, bad PR is obtained, and everyone loses.
> Option 1: comply with LE+owner's request; they have a chance to recover vehicle; costs are low and bad PR is avoided
Consequence 1b: you released tracking information to a stalker. They fooled your rep into thinking police were involved. Not only do you have a PR nightmare, you've also opened yourself up to legal liability.
I'm not arguing this is the right balance. Finding that balance depends on branding, legal and financial factors. But it's not an unreasonable position.
> They fooled your rep into thinking police were involved.
This is why you have policy for appropriate response and organizational escalation in place if necessary. Not hard to contact the department in question via another directory and verify the request.
Option 2: don't comply with LE+owner's request; deal with later warrant at higher cost (now you have compliance & legal involved); vehicle is not recovered, bad PR is obtained, and everyone loses.