I wonder if it gets to be like browser fingerprinting where turning your Bluetooth off itself becomes a data point in combination with your make, model, dents and dings on your car, etc.

Also, most Bluetooth devices today - the ones they seem to be tracking, anyway - are using Resolvable Private Addresses, meaning the devices exchange not the MAC address directly, but a crypto key that can be used, in correlation with the current time, to determine a pseudo-randomly generated address and establish connection...

I've implemented Bluetooth tracking in my home (using ESPHome and in-house triangulation - I have appropriate nodes all over my home for this), and needed to extract the IRK for my iPhone and Apple Watch (but same goes for Android devices).

They may be able to track older Bluetooth devices (headphones and such), and older built-in Bluetooth systems in cars (not sure if they can be disabled tbf), but modern phones? Not unless they illegally tap into the phone somehow and extract the key for predicting the addresses.

It'll probably suck and use AI to guess at mac addresses and just end up costing a bunch.

What if you're using it?