But, what if the data is coming directly from the RFID readers? Depending on which boards they're using to read the rfid cards it could be a simple bluetooth broadcast that his phone picks up. His phone could constantly scan for bluetooth signals -- it wouldn't even need to make an actual bluetooth connection, the card data could be embedded in the advertising signal for anyone who knew the schema to pickup.