1. A method comprising: receiving tokens and corresponding timestamps from devices; identifying devices that have exchanged one or more tokens at a time, or in a time frame, determined by the timestamps; identifying users associated with the identified devices; and creating a group for the identified users.