If you hire a loss prevention officer to protect your store, you're directing them in how they collect information about your customers and how they handle that data.
The closer equivalent would be if I purchased Square point of sale tablets to accept credit card payments in my store, and then Square sent their own loss prevention officers to my store to monitor my customers without telling me about it and kept the data for their own purposes.
Do people routinely avoid all B&M retail stores?