Linked from elsewhere, the original Financial Post story that triggered this specific investigation is quite the eye-opener. The reporter filed a PIPEDA request to get a copy of their own data, and then goes on to describe the findings in quite some detail. https://financialpost.com/technology/tim-hortons-app-trackin...