The iBeacon transmitter may be passive, but the signal is typically passed to an app running on a phone, which can do anything, including post all it's position

The iBeacon transmitter may be passive, but the signal is typically passed to an app running on a phone, which can do anything, including post all it's position and time info to a server online. The good news is that it appears to be opt-in. In most, if not all, instances a user needs to install an app and enable location services before the iBeacon will trigger anything. No app listening for a particular beacon or set of beacons, no problem. Of course, there could also be malicious code running on the phone, installed by the government or spies, that could silently record everything. That could work now with gps, voice and video recording, wifi network positioning, etc. iBeacon is just one more set of data to collect.