Generally not your SSN - I've never had to give it for Sudafed - but at least full legal name, birthday, gender, home address, driver's license number, telephon

Generally not your SSN - I've never had to give it for Sudafed - but at least full legal name, birthday, gender, home address, driver's license number, telephone number, location(s) you've been to buy medication, and possibly email address. Much of which would be covered as PII and PPI, and, in combination with info from other other data breaches can tell someone a lot about you.