I see absolutely nothing wrong or big-brother about such a system if the data stays on premises only until you leave (or maybe until the end of the day to give you in-and-out pricing privileges).

On the other hand, if the data is being sold to a data aggregator that is troubling. We see lots of surprising things like this, for example weather apps selling your location data.

This is why we need better data protection rights. GDPR has a lot of good ideas (though implementation was painful). CCPA should be strengthened.

Ideally we’d get a federal law limiting data collection without consent. (The optimist in me thinks this could be bipartisan.)