There's a startup in Palo Alto that uses phone signals to track consumers and generate analytics. Perhaps their technology is being used. http://euclidelements.com/
I'm guessing the mall tracking systems are using something on the GSM and CDMA spectra, and are sniffing UDIDs?