How hard would it be to make a device that spoofs everyone's phone?
It requires reverse engineering which data in being transferred to the school. This likely occurs using a simple HTTP request. Or series of requests. Copy the data from that HTTP request. Then replicate those HTTP requests.