Sure they can
You're under constant video surveillance whenever you step into a mall. There's nothing to prevent connection between the security cams for individuals stores & the cameras for the mall itself - in fact, there's good reasons for them to share a single system. Neither is there anything to prevent the use of security cams for other purposes. Now they add this phone tracking. I'm no privacy alarmist & I rarely shop at malls, but the possibilities are intimidating. While the left & the right scream at delusions of secret government conspiracies, the corporations quietly do whatever they want.