How do you define cheating? This is a very gray area... Technically, using a third party tracker is cheating, yet a lot of people do it. Is using a web map that gives you a location of pokemons (like vegas pokemap) cheating? How do you prove it?
Location of caught pokemons is hard to use because a lot of people travel (e.g., I've caught pokemons in Boston, New York, Stamford, Chicago, Philadelphia, Montreal, Vancouver, Russia, Iceland, Sweden, Denmark, etc.).
Having a lot of a certain pokemon is also misleading - highly dependent on how much you play and where you play.
All in all, I don't think that there is a reliable source of finding cheaters by just looking at the app. I think you'd have to track distance / time-to-gym takeovers. But even then, really hard to discern who is actually driving from gym to gym vs .spoofing. The only thing Niantic may be able to reliably track are "teleporters" - people who travel ridiculous distances in no time. But even that may be unreliable and cheaters will smarten up to it.
Wish I had a better answer for you.