Do iPhones use active scanning to find Wi-Fi networks when Ask to Join Networks is off?
Since iOS8 the MAC is randomised while scanning for wi-fi networks. I believe that has since been adopted by most devices.
The REAL MAC is only used after connection to a network.