OP here. There were five of us and we all knew it was happening because it was a prototype for a client we were pitching. But we collected data from several hun

OP here. There were five of us and we all knew it was happening because it was a prototype for a client we were pitching. But we collected data from several hundred unique MAC addresses from the surrounding office spaces, including their wireless NAS and Philips HUE lightbulbs. We never knew the MAC addresses of anybody but ourselves, though with physical surveillance we could have correlated MAC addresses to comings and goings. Basically I don't feel that this is particularly creepy unless you are applying it to identifying and tracking specific people. For bulk population metrics I have no problem whatsoever, and I have no problem being tracked in this way, but as a data analyst I know that the line between 'fine' and 'invasive' is a single SQL query. It's kind of like how tracking phone calls metadata for billing is OK, while tracking it for surveillance is not, and the difference is the collector's intention.