> They don't take your ID, your picture and store it forever and then sell information about you to other people.

It would not surprise me in the least if there are brick-and-mortar businesses doing this, especially larger companies in jurisdictions (such as the majority of the United States) with weak/nonexistent privacy protections.

They don't need to. If you bought something with a card they just store that - let the data brokerage handle connecting it with actual ID cards and other elements of your identity.

But yeah, walmart is for sure logging their transactions and selling the data. It's practically free money.