I assume the agreement the user accepted allowed them to do this.
Kind of like walking into Target. They are scanning you even before you enter the doors now days, and tracking everything you do or buy. Even more so if you use their credit card. The reason they can do that is because you agree to their terms...
This is also a reason why I would never log on to a Corporate companies "free WiFi" ...
