Walgreens (Walgreen Co., operating under Walgreens Boots Alliance, Inc. until the company was taken private by investment funds managed by Sycamore Partners Management, L.P. in August 2025) is a US pharmacy and retail chain whose consumer privacy policy discloses broad collection of precise location, in-store Bluetooth proximity, and camera-derived operational data alongside standard purchase and account information. The policy states Walgreens does not sell pharmacy information but discloses working with third-party advertising networks that build behavioral profiles from site cookies, and its 2025 CCPA metrics show over 219,000 consumer requests to opt out of 'Sale/Sharing' processed in a single year. Apple's App Store privacy label for the Walgreens app independently confirms that purchase, location, search/browsing history, and device identifiers are linked to identity and used for third-party advertising and cross-app tracking. Corporate ownership is now traceable through a mandatory SEC Form 8-K filed to close the Sycamore Partners buyout, though the company's move to private ownership reduces future routine disclosure (e.g., no further annual 10-Ks expected). No FTC action or large-scale data breach was found in primary sources; a Massachusetts data-breach notice describes a single-store payment-card skimmer discovered and removed within a day in April 2024, with SSNs and bank accounts confirmed unaffected.
TRACK RECORD
1 ENFORCEMENT ACTION
[2024-05-21]
A Massachusetts data-breach notification letter from Walgreens' Privacy Officer describes a payment-card skimming device discovered attached to a point-of-sale pin pad at a single Bridgeport, Connecticut store on April 9, 2024, which was removed the next morning; the letter confirms bank account, driver's license, and Social Security numbers were not compromised, indicating a limited, quickly remediated physical-security incident rather than a systemic data breach.
Apple's App Store privacy label for the Walgreens app, as self-reported by developer Walgreen Co., discloses that purchase history, coarse location, search history, browsing history, and device identifiers are collected and linked to the user's identity, used in part for third-party advertising.
Walgreens' privacy policy discloses that it may collect 'precise location information' through satellite, cell tower, WiFi signal, beacons, Bluetooth, and near-field communication protocols when a customer enables location services, extending collection into fine-grained physical tracking beyond standard purchase or account data.
Walgreens Boots Alliance, Inc.'s SEC Form 8-K filed to report completion of its going-private merger names the acquiring entity's ownership chain, stating that the Parent and Merger Sub in the transaction are affiliates of investment funds managed by Sycamore Partners Management, L.P., providing a traceable public record of the new controlling owner via a mandatory SEC filing.
Apple's App Store privacy label lists 'Third-Party Advertising' as a stated purpose for data (purchases, location, search/browsing history, device identifiers) that Walgreens links to a user's identity, corroborating from an independent Apple-reviewed source that identity-linked data flows to advertising use beyond fulfilling the immediate transaction.
Walgreens' privacy policy discloses that it works with third-party advertising networks to serve ads on its behalf, and that cookies received with those network-served advertisements may be used by the networks to build behavioral profiles for targeted advertising on both Walgreens' site and unaffiliated websites.
A Massachusetts data-breach notification letter from Walgreens' Privacy Officer describes a payment-card skimming device discovered attached to a point-of-sale pin pad at a single Bridgeport, Connecticut store on April 9, 2024, which was removed the next morning; the letter confirms bank account, driver's license, and Social Security numbers were not compromised, indicating a limited, quickly remediated physical-security incident rather than a systemic data breach.
Apple's App Store privacy label states that purchase, location, contact, search-history, browsing-history, identifier, and usage data collected by the Walgreens app may be used to track the user across apps and websites owned by companies other than Walgreens, i.e. cross-app/cross-site tracking as verified through Apple's label framework.
Walgreens' privacy policy discloses that in-store cameras are used not only for security but also for operational analytics purposes, specifically measuring customer traffic patterns and tracking in-stock inventory levels.