Swiping into a building is the electronic equivalent of signing in on a clipboard held by a security guard. That is hardly spying, and it's definitely not "your data."

If a municipality were to do this with all the private residences under their jurisdiction, sure, that'd be Orwellian, because then it really is your data. In this case it's MIT's data about MIT's facility that happens to have been triggered by you.