Yep, this is pretty common practice. https://adage.com/article/dataworks/data-partners-tie-mobile-ads-drug-refills-doc-visits/302937 https://adage.com/article/d

Yep, this is pretty common practice. https://adage.com/article/dataworks/data-partners-tie-mobile-ads-drug-refills-doc-visits/302937 https://adage.com/article/dataworks/data-partners-tie-mobile... is a decent writeup of a few of the ad targeting providers involved. In general, if you don't want something tracked, don't use a loyalty card, and pay with cash. The entire point of loyalty cards is to derive value from your purchase history in any way possible. And per https://ncvhs.hhs.gov/wp-content/uploads/2018/05/NCVHS-Beyond-HIPAA_Report-Final-02-08-18.pdf https://ncvhs.hhs.gov/wp-content/uploads/2018/05/NCVHS-Beyon... page 4, OTC transactions do not create PHI for the purposes of HIPAA.