The McDonald's kiosks could very easily be sharing data with other private companies (e.g. Palantir) who the government contracts with. There are so many other companies jumping in on sharing data like this, why would a company like McDonald's care about selling out customer privacy in exchange for a better bottom line for investors?