McDonald's Loyalty Program Built 515-Page Predictive Profile

Inside a fast-food data dossier

When a reporter exercised his California privacy rights to request personal data from McDonald's, the company delivered a 515-page document that revealed far more than a transaction history. The file contained algorithmic predictions about his future behavior, including how many times he would visit in the next six weeks (2.16), what he would spend per order ($13.49), and his total predicted value to the company ($29.15).

The document, first reported by WIRED, also assigned the customer behavioral labels like "Food-Led Afternoon Snack" and "On the Go Lunch in a Rush" based on purchasing patterns. Perhaps most striking: McDonald's calculated his customer attrition likelihood as zero—meaning the algorithm predicted he would never stop being a customer.

How loyalty programs track and predict

The McDonald's app loyalty program creates detailed records every time a customer opens the application. The reporter's file logged not just purchases but also every scanned Monopoly sweepstakes code and corresponding prize. The company's algorithms then processed this data to rank his top 10 most relevant products, with a large Diet Coke taking first place.

McDonald's assigned the customer to an internal value tier labeled "CV2," though the company does not publicly explain what these classifications mean. The system also identified his most frequent geographic locations, tracking 61 visits to the Santa Barbara area.

A McDonald's spokesperson told WIRED that the company "takes data privacy and security seriously" and uses purchase information "to provide a more engaging, personal customer experience—like delivering the most relevant deals, offers and messages."

Why it matters

Privacy experts say this level of data collection represents standard practice for major American loyalty programs, but most consumers don't understand the extent of surveillance when they sign up for discounts. "McDonald's secret sauce is really commercial surveillance," Jeff Chester, executive director at the Center for Digital Democracy, told WIRED.

The power imbalance is significant. While individual data points may seem harmless, their aggregation over years creates detailed behavioral profiles. "You eating this burger or liking that musician itself may not be private, but the aggregation and collection of this information, as well as its processing through AI, can create pretty invasive and personal information," Ari Ezra Waldman, a law professor at UC Irvine, explained to WIRED.

Lorrie Cranor, director of Carnegie Mellon's CyLab Security and Privacy Institute, suggested companies should provide detailed disclosures during sign-up that explain what will be stored in customers' "permanent record" and how data will be used to make inferences about them.

The deletion option

California residents have the legal right not only to access their data but also to request deletion. After reviewing his file, the reporter submitted a deletion request through McDonald's Privacy Rights Center. However, privacy researchers note that the format of these data dumps—hundreds of pages of technical information—makes them difficult for average consumers to parse and understand.

Ryan Calo, a professor at the University of Washington's Tech Policy Lab, points out that customers operate within the company's ecosystem: "You're going through their drive-through. You're using their kiosk. You're using their app. You're in their ecosystem, and they have a bunch of people with letters after their names trying to design it in a way that maximizes profit."

The details were first reported by Reece Rogers at WIRED.