It's been the same here in India over the last decade or so. Digital kiosks have sprouted up like mushrooms and many innocent people are using them. All these kiosks are run by private companies and here in India, there are no rules for Data and privacy. These companies are doing it here without any trouble. Government is working way too slow in the direction of enacting any laws that prevents the breach of someone's personal information. I doubt government doesn't give it a shit here to privacy.

Both Android and iOS support and default to using MAC address randomization, so I'm not really sure what the issue is here.

Um yeah no bueno!