Even if not connected to a WiFi network (but with WiFi enabled), your phone periodically emits beacon packets and otherwise scans for available networks. Such packets, among other things, contain information about the strength of the signal (RSSI). Having positioned several base stations, listening for such packets, one may be able to (crudely) localise people by trilateration (or multilateration). This project will implement such a localisation system, and investigate its limitations and possible improvements.
Prerequisites: interest in machine learning and security, excellent programming skills and a degree of ingenuity.