Even without any sim card the phone will make and maintain a 3G / HSPA+ connection to a random operator.
This is for emergency calling.
You an see it in the app Netmonster, for example.
I would guess, but don't know for sure, that is how it determines location.
You can disable this by...