You Came to Walmart for Groceries. Your Phone Brought Data — and Walmart Is Storing and Selling It.
The company publishes what it may collect in the store. Walking in is how most people “agree.”
Walmart does not need to pick your pocket to learn you were in aisle 12.
They tell you what they may collect in their Customer Privacy Notice, and that notice covers online and in-store activity. It was updated in late 2025.
You don't sign it at the door.
You're treated as having seen it because it's posted and because you came onto the property.
That's the part most people miss.
The agreement isn't a handshake. It's a policy plus your presence.
What Walmart says it can collect in and around the store
This comes from Walmart's own notice. Not a rumor thread.
Device identifiers.
MAC addresses, IP addresses, cookie IDs and mobile advertising IDs.
Where your phone is.
GPS if you've allowed the app to use precise location. Inside some stores, Walmart says it may recognize the device through free Wi-Fi or Bluetooth.
What that Bluetooth is for.
In Walmart's words: nearby products, finding items and navigating the store when its mobile services are in play.
Cameras and “automated technologies.”
Walmart says these are used in the store and on the lot for security, theft, checkout and store design. Those cameras can capture images of you.
Your license plate.
Walmart has a separate Automated License Plate Reader, or ALPR, notice. It says plate information is kept for about 60 days, and longer when necessary for a legal matter.
Biometric categories.
The policy lists voice prints, face geometry, iris or retina imagery, palm prints and fingerprints.
That does not mean Walmart collects every one of those things from every person. The notice specifically says not every category is collected about every person.
Inferences.
Shopping patterns and behavior built from the other information collected.
Now start connecting those pieces.
If you pay with a card, scan a QR code, use Walmart Pay or shop while logged into the Walmart app, that trip can sit next to a name.
Cash, no app and no Wi-Fi creates a thinner file.
It does not make you invisible.
The parking lot still has cameras. Your phone may still be talking to nearby radios if Wi-Fi and Bluetooth are on.
What Walmart is not doing
This matters just as much.
They're not opening your photos because you walked past the greeter.
A store radio seeing a device identifier is not the same thing as reading your texts.
If somebody tells you the cameras in the ceiling are dumping your Messages app, they're wrong.
We don't need to invent a scarier version of this.
The real door is quieter.
Your phone announces itself. The store records the visit. The app, if you've installed it, already has permission to be more precise. And Walmart's policy says that data can be used for advertising and marketing, including targeted ads.
That's enough to pay attention to.
How you “agreed”
You agreed the way most American retail works.
They published a notice.
You entered the building or the lot.
If you installed the app, you separately allowed location, Bluetooth, camera or tracking permissions on your phone.
Nobody stopped you at the door and read you the MAC-address paragraph.
That doesn't make the paragraph disappear.
What actually cuts the collection
Do these things before you park, not after the ad follows you home.
1. Check the Walmart app.
Set Location to While Using or Never. Turn Bluetooth access off for the app if you don't need store navigation.
2. Quiet the phone's radios.
Turn Wi-Fi and Bluetooth off if you're only buying milk. A phone that isn't probing for networks is a smaller target.
3. Don't join “Walmart WiFi” unless you need it.
Guest Wi-Fi is how a device identifier gets tied to a session.
4. Pay cash when you don't want the trip sitting next to a card name.
Still assume cameras and license-plate readers are there.
5. You don't need location turned on all the time for pickup.
Use it to check in when you need it. Turn it back off in the parking lot.
6. Use your state privacy rights if you have them.
California and other states provide privacy-request rights. Ask Walmart what it has about you. Use Walmart's published privacy-request process, not a comment section.
None of that makes you invisible.
It reduces unnecessary collection.
Same job as the rest of this site.
The hard-target version
A store is allowed to watch its floor.
You are allowed to walk in with a quieter phone.
Those two facts can sit together.
The door isn't magic. The policy isn't secret.
The phone is the part you still control.
Opting Out, Step by Step
There are two separate jobs here.
Do both.
Job 1 — The phone in your pocket
This works in every state.
Do it before you park.
1. Open the Walmart app.
2. Turn off Location.
On iPhone:
Settings → Privacy & Security → Location Services → Walmart → Never
If you need location for pickup check-in, use While Using and switch it back afterward.
On Android:
Settings → Apps → Walmart → Permissions → Location → Don't allow
3. Check the other permissions while you're there.
Deny Bluetooth, Nearby devices, and Tracking/App Tracking Transparency if they're still enabled and you don't need them.
4. Turn off Wi-Fi and Bluetooth if you're only buying groceries.
Turn them back on when you get to the car.
5. Don't join the store's free Wi-Fi.
If you don't need it, don't create the connection.
6. If you don't need the Walmart app this month, delete it.
The privacy notice still covers your visit.
The difference is that the app is how precise location and in-aisle Bluetooth become easy.
Job 2 — Walmart's file on you
Walmart publishes a process for this.
1. On a computer, open Walmart's website and scroll to the footer.
2. Click “Your Privacy Choices.”
You can also use Walmart's Privacy Center.
3. In the Walmart app, open Settings and look for “Your Privacy Choices” or Privacy.
4. If the website gives you trouble, call 1-800-WALMART (1-800-925-6278), press 1 and say “Privacy.”
From the privacy hub, use the requests available to you in your state:
Do not sell / do not share.
This covers targeted advertising. Walmart may call this a sale or sharing even when no cash changes hands.
Limit sensitive personal information.
Use this if the option is offered.
Access.
Ask what Walmart has about you. I would do this at least once so you can see the shape of the file for yourself.
Delete.
Ask Walmart to delete what the law allows it to delete.
Correct.
Use this if information such as your name or address is wrong.
Consumer health data choices.
If that option appears, pay attention to it. Pharmacy and wellness data lives on a separate switch.
If you're logged into a Walmart account, make the opt-out while you're logged in.
Walmart's own notice says the preference then follows the account to other devices when you log in.
If you opt out while logged out, the preference often sticks only to that browser.
And don't expect every request to happen immediately.
Walmart's California reporting shows that access requests can take weeks. Sale/share opt-outs are usually faster.
They may also ask you to prove who you are.
That's normal.
Use the same name and phone number associated with the account.
What changes?
You reduce how much information your phone automatically hands over and exercise the privacy controls available for information Walmart already has.
What still works?
You can still shop.
You can still use Walmart Pay.
You can still use pickup.
You can still use the app when you actually want one of its features.
You aren't breaking the technology.
You're deciding when it gets access.
That's the difference.
A store can collect what its systems are designed and permitted to collect. You can stop volunteering the pieces you don't need to volunteer.
Harder to target. Not harder to use.
What this does not stop
Cameras in the store and on the lot
License-plate readers (they say they keep plates about 60 days)
A device identifier if Wi-Fi or Bluetooth is still on
Receipt data tied to a card or a scanned account
You will still see ads. They are just not supposed to be built from the “sold or shared” version of you.
Mail if you want a paper trail
Walmart Corporate
Privacy Office, MS #0160
811 Excellence Dr
Bentonville, AR 72716-0160
Put full name, account email, what you want stopped, and a phone number.
One pass, once a year
Phone settings the morning of the trip. Privacy Choices when you get home. That is the whole ritual. The door policy does not change. Your phone can.
