Can't they already do that by snooping on ARP traffic on your home LAN? Failing that, if they can get whatever shitty wifi chipset they're using to enter promiscuous mode, they can also sniff all STAs that are in the vicinity, and with some ML they can probably figure out which MAC belongs to your phone.