It’s still scanning (or at least listening to) all the other devices on your local network, like your phones, PCs, etc. It collects an inventory and if it ever happens to get Internet access, uploads that data.
That's why you put IoT crap into an isolated vlan with its own ssid, enforce device isolation for that ssid across all WAPs, and enforce isolation on the vlan level with your switches to cover any hardwired devices.
That's why you put IoT crap into an isolated vlan with its own ssid, enforce device isolation for that ssid across all WAPs, and enforce isolation on the vlan level with your switches to cover any hardwired devices.