How can one verify that contact tracing is not just happening anyway? People roam with wifi, gps and data service on all the time.

The data is collected regardless.