Some hotspot providers quietly track millions of users’ whereabouts even after they have left the establishment.