Surveillance
Your Grocery Store Made $527 Million Selling Your Data
Next time you hand your loyalty card to the cashier or punch in your phone number at checkout, ask yourself a simple question.
Why is a grocery store giving you free stuff?
The discount on your cereal. The fuel points. The digital coupons. None of that is charity. Grocery stores run on some of the thinnest profit margins in American retail. They make pennies on the dollar. They do not give things away.
So what are they getting in return?
The answer is worth understanding. Because it is not just about grocery stores. It is about a system that has quietly turned your daily life into a product sold to strangers without your knowledge.
You Are the Product
A Consumer Reports investigation found that Kroger, one of the largest grocery chains in the country, has built an entire second business around selling what it knows about you. Not a side hustle. A major, growing, planned revenue line that their executives openly discuss with investors.
, , , ].map(() => (Let that sink in. More than a third of Kroger's profit does not come from selling groceries. It comes from selling information about the people who buy groceries.
And they project that number growing to $825 million by 2027.
The discount card is not a reward program. It is a data collection device. The savings are the fee they pay you for access to your information. Most people are getting the worse end of that deal by a significant margin.
What They Actually Know About You
When you sign up for a loyalty card, you hand over your name, phone number, email address, and home address. That is just the starting point.
From that moment forward, every item you scan gets recorded. Every purchase. Every week. For years. The store builds a detailed picture of what you eat, what brands you buy, when you shop, how often you come in, and how much you spend each visit.
But here is where it gets genuinely uncomfortable. Kroger does not stop at what is in your cart. According to The Markup's investigation, many grocers take your personal information and enrich it with data purchased from outside data brokers. That means the profile they build on you can include your estimated income, your race and ethnicity, your employment status, and your activity across the internet.
They are not just watching what you buy. They are building a file on who you are.
Think about what a grocery cart actually reveals. Prenatal vitamins and pregnancy tests tell a story. Kosher foods suggest a religion. Insulin supplies and diabetic specialty products reveal a medical condition. A weekly alcohol haul says something too. Baby formula tells you there is an infant in the house. Ensure or Boost suggests an elderly family member. The cart is a window into your life in ways most people have never thought about.
All of that is being captured, analyzed, categorized, and sold.
"Consumers should be able to go to the grocery store and put together a meal for their families without finding themselves on the menu."
Lindsay Owens, Executive Director, Groundwork Collaborative
The 62-Page File
One customer in Oregon decided to find out exactly what Kroger had on him. He used Oregon's data privacy law to formally request his complete file.
It was 62 pages long.
Inside, he found that his data had been shared with more than 50 different companies. The list included one of the country's largest data brokers, tobacco companies, financial institutions, analytics firms, a healthcare tech company that works with health insurers, and a fintech platform that processes government food assistance payments.
He also found that most of the personal details Kroger had inferred about him were wrong. His gender, education level, and income were all misclassified.
Wrong data. Shared with 50 companies anyway.
That last part matters. The data does not have to be accurate to cause harm. Once it is sitting in the databases of 50 different companies, there is no taking it back. Insurance companies use this kind of data to set rates. Employers use it in background profiles. Landlords use it to evaluate tenants. The data follows you regardless of whether it is correct.
The Income Predictor
Kroger built an internal algorithm they call an income predictor. It estimates how much money you make based on what you put in your cart each week.
That estimate is then used to determine what discounts you see. Shoppers the algorithm classifies as higher income are shown better deals. Shoppers flagged as lower income may receive fewer of Kroger's best promotions.
The store that built its reputation on helping everyday Americans save money on groceries is quietly sorting its customers by perceived wealth and offering them different prices. All without telling you it is happening. You just notice that the coupon in your app is different from the one your neighbor got.
Consumer Reports tested the income predictor and found it was frequently wrong. Customers were being misclassified by income, education level, and household size at significant rates. The algorithm had real consequences for real people and it was getting it wrong regularly.
Kroger's response when confronted with this: the data helps them send more relevant promotions.
They Track Where You Walk Inside the Store
The data collection does not stop at the register. According to privacy policies reviewed by investigators, grocery store apps have the technology to track your precise location inside the store. Not just that you were there. Exactly where you walked. Which aisles you went down. How long you stood in front of a particular shelf. Which products you picked up and put back without buying.
Connect to the store Wi-Fi and they can pull data from your phone. Use the app while you shop and the same thing happens. Some chains have begun installing in-store cameras capable of collecting biometric data including facial recognition.
Kroger announced plans to roll out facial recognition technology connected to digital price display screens. The system would identify customers as they approached a display and potentially show them personalized pricing based on their stored profile.
This is not speculation about what might happen someday. It is written into the privacy policies you agreed to when you signed up for the card. Most people never read those policies. The stores count on that.
The Moment You Connect to Their Wi-Fi, Your Phone Sells You Out
Every smartphone carries something called an Advertising ID. On Android it is called the GAID. On iPhone it is called the IDFA. It is a unique identifier assigned to your device that advertisers use to track you across apps, websites, and physical locations.
The moment you connect to a grocery store's Wi-Fi network, that network can read your Advertising ID. They now know exactly which device belongs to which person walking through their store.
Here is what that makes possible. The store already knows your purchase history from your loyalty card. They already have your name, address, and email. Now they have confirmed that the specific phone with your Advertising ID walked into their store at a specific time. That data point gets added to your profile.
From that moment, your Advertising ID follows you everywhere online. The store, or any data broker they sold your ID to, can now serve you ads on every app you open, every website you visit, and every platform you scroll. They know you walked into that store. They know what you bought there. And they can reach you on your phone indefinitely because they have the ID that connects all of it together.
It goes further than digital ads. That Advertising ID, combined with your loyalty card data, confirms your home address. Stores and the data brokers they work with can use that to send you physical mail. Coupons. Offers. Targeted mailers based on what your purchase history says about your health, your income, your household, and your habits.
You walked in to buy milk. You left with a permanent tracking tag attached to your phone.
"The game we're playing here in America now is: if you want the savings, you've got to be willing to give up your data."
Herb Weisbaum, Consumer Editor, Checkbook.org
Where Your Data Goes After the Store
Kroger runs a data science subsidiary called 84.51, named after the longitude of their Cincinnati headquarters. It is one of the most sophisticated consumer data operations in the country. Its client list includes over 1,400 companies.
General Mills. Unilever. Coca-Cola. Kraft Heinz. These companies pay 84.51 for detailed intelligence on Kroger shoppers. Not just sales numbers. Behavioral context. Why people buy what they buy. What else they buy at the same time. How sensitive they are to price changes. What kind of messaging influences them.
But it does not stop at consumer brands. The data flows further than most people imagine.
- Who Ends Up With Your Grocery Data
The government and political campaigns entries deserve a second look. Federal agencies have been documented purchasing commercially available data to build profiles on Americans without needing court approval. And political operations on both sides use consumer purchase data to model voters and target them with tailored content. Your weekly grocery run is feeding all of it.
The SNAP Problem
One of the companies that appeared in that Oregon customer's 62-page file was Solutran, a fintech platform that processes Electronic Benefit Transfer payments. EBT is the system that handles SNAP benefits, what most people call food stamps.
People who rely on SNAP to buy groceries are among the most financially vulnerable Americans. Their purchase data flows through the same loyalty system and gets packaged alongside everyone else's.
The grocery store knows you are receiving government food assistance. That information can travel through the data broker chain to insurance companies, lenders, and employers. A financial circumstance someone has no control over can quietly shape what products they are offered, what rates they receive, and how they are evaluated in ways they will never be shown or told about.
The Anonymization Myth
Grocery chains, when pressed on any of this, say the data they share has been anonymized. Your name is stripped out. You become a number, not a person. Nothing to worry about.
Researchers at MIT took a close look at that claim. They published a study showing that with just four data points from anonymized credit card records, they could correctly re-identify 90 percent of individuals. Four data points. Your zip code, a rough age range, two purchase amounts. That is all it takes to put a name back on a number.
Your grocery purchase history combined with your location data is not anonymous in any practical sense. It is a fingerprint. Anyone with basic analytical tools and access to a second data source can reconnect the dots back to you personally. The anonymization provides legal cover for the companies. It does not protect you in any meaningful way.
This Is Not Just Kroger
Kroger gets the most scrutiny because investigators have dug deepest there. But the same business model runs across virtually every major grocery chain in America.
- Your Store. Their Data.
The Real Cost of Your Coupon
The loyalty card felt like a simple deal. Scan your card, save a dollar here, earn fuel points there.
Here is the deal you actually made. In exchange for occasional discounts that rarely add up to more than a few dollars per trip, you gave the store the right to record every purchase you make for as long as you shop there. You gave them your personal contact information. You gave them your location data. You gave them the right to build a detailed profile inferring your income, health status, ethnicity, religion, and lifestyle. And you gave them the right to share all of that with an unlimited number of outside companies, including data brokers who can sell it to anyone with a checkbook.
That is not a loyalty program. That is a data extraction operation with a discount card attached to the front of it.
What You Can Do About It
If you live in Oregon, California, or one of the other states with a consumer data privacy law, you can formally request your complete file from any grocery chain you use. It costs nothing and takes a few minutes.
Every major chain also has an opt-out option buried somewhere in their privacy policy. Finding it is intentionally difficult. It exists. Opting out will not stop the collection entirely, but it limits what they are allowed to sell to third parties.
Stop using the apps. The apps collect significantly more than a swipe at checkout. In-store location tracking, browsing behavior, and biometric data collection are all tied to app usage in most chains' policies.
Use a separate email address when signing up. It does not eliminate the purchase data trail, but it creates a layer of separation between your grocery profile and your primary identity.
Pay with cash. It is the only method that completely severs the connection between your identity and your purchases. No card, no app, no phone number at checkout. Just groceries.
Most people will not do that. The convenience is real and the surveillance is invisible, which is exactly how it is designed. But now you know what the loyalty card actually costs.
Ghost Phone
Your phone is the biggest data collection device in your life.
Every Android and iPhone ships with an Advertising ID that follows you into every store, every app, and every website you visit. Ghost Phone does not have an Advertising ID. No ID means no tracking. No tracking means no profile. No profile means nobody is selling you.
Sources
