When a user's phone attempts to get a location fix, it will use the beacons which are publicly transmitted by Wifi networks around it (I assume it's the BSSID/MAC address, specifically) to reference against (or update) a Google database mapping those BSSID's to coordinates.