Via their FAQ:

The data on the map above is a mirror of an inventory of Flock devices that security researcher Joshua Michael retrieved from Flock's own systems through an access token Flock had left exposed. Maps like DeFlock rely on volunteers reporting cameras they spot; this inventory comes from Flock's records.