>since customers walking in those stores haven't really signed up for this analysis

In the US at least there is no requirement for this. You're already being watched, tracked, and put in identification databases as it is.