McDonald’s customer data profiling controversy

Investigations have revealed that McDonald’s utilizes its loyalty program and mobile app to compile extensive digital profiles on customers to predict future behavior.

Following a data access request made under the California Consumer Privacy Act, a journalist discovered a 515-page dossier containing detailed transaction histories, loyalty points, and promotional data. The file included highly specific computational predictions, such as estimated visit frequency, average spending, and total projected expenditure. The company’s algorithms even categorized eating habits into behavioral profiles, such as ‘Food-Led Afternoon Snack’ and ‘On the Go Lunch in a Rush.’

Further reports indicate that the company uses algorithms to analyze purchase history, app interactions, and geolocation to create psychological and behavioral profiles. According to the company’s privacy policy, monitoring includes browsing history, social media activity, and app usage, which are reportedly used to train AI models to predict consumer attitudes and spending habits. McDonald’s has stated that it uses past purchase information to provide ‘more engaging experiences’ and maintains that it takes steps to safeguard customer information.

Broader concerns have since been raised regarding the privacy and security risks inherent in retail and fast-food loyalty programs. Financial experts warn that such programs may be designed to monetize personal information—including income levels, locations, and health concerns—by selling it to data brokers. Experts suggest this collected data could facilitate sophisticated scams or social engineering attacks, leading to recommendations such as using VPNs and avoiding the disclosure of phone numbers during sign-ups.