iOS and Android devices send a WiFi "ping" every so often - I believe this is done to improve locationing accuracy, by augmenting GPS data with WiFi signal strength data. You can read these pings from any AP, even if the device is not associated with the AP. You'll only get the device MAC, but that's enough to tell you the device make and get a unique ID on the customer.