Offline and account-free, the open source app sideloads onto Android to map hardware signatures without sending data.