If every DC Starbucks is serving WiFi via a single network vendor like AT&T etc. then the surveillance is already in place. Particularly, if only metadata is being collected.
A specialized device is not really needed. Just a Mitm position between the stores and the Internet.