Seriously? This is a privacy concern? I really should get into the tin foil hat business.
1. Point a camera down a narrow traffic area -- like each door to the mall.
2. Capture their cell signal at the entrance.
3. Correlate using face-tracking.
4. Prune errors by tracking exits and entrances.
Now you have a pretty good idea of which face has which phone, for that visit and all future visits to anywhere the mall sells their tracking database to.