No mistakes were made. This was planned.
Aren't we forgetting the requirement to store this data. A system designed to collect only SSIDs and MAC address would have a much, much smaller requirement for data storage than one that was collecting complete packets of data over time. No way this could get through any stage of development especially testing without everyone knowing it was there.
Biting the hand that feeds IT
