. . "Even when monitored data does not include login credentials, it still may include user names, home pages, or other data that can be cross-referenced with a unique hardware identifier and previously accessed SSIDs to provide clues about the person using the device." . . .