A server has a processor and a memory connected to the processor. The memory stores instructions executed by the processor to collect scan lists from client devices, where each scan list specifies a Wi-Fi access point identifier collected by a client device and geographic coordinates of the client device when the Wi-Fi access point identifier was collected. A cluster of geographic coordinates around a designated Wi-Fi access point is formed. A centroid within the cluster is identified. The location of the centroid is ascribed the geographic position of the designated Wi-Fi access point. The geographic position of the designated Wi-Fi access point is added to a Wi-Fi access point location database. A Wi-Fi tag scan list is processed to form a tag path listing known geographic locations of Wi-Fi access points observed by the Wi-Fi tag. The tag path is supplied in response to a request.