This is what we have seen over the years:
Google My Business (GMB) profile: Accurate NAP (Name, Address, Phone) details, relevant categories (important but usually ignored), photos are iffy - we have seen results with both few (2-3) and lots of snaps, and positive reviews definitely - Google does not sort using it but users definitely checks this
Proximity to the searcher: BUT Google does not always pick the right location - someone in Navi Mumbai may get results for Central for example. If Google does provide the right location then the user using default and not incognito mode helps here
On-page SEO signals: DA, PR/PA, title, meta and keyword that cater to the relevant user intent
Citations and backlinks: These are still valid even after 2+ decades of online marketing. Google understand how SEO intent is used but we think it does appreciate the site putting in the effort to get links
Let us know if you have any specific queries and will try to help. Thanks