Look at permissions.

• retrieve running apps (why does it need to know what else is running on my phone?)
• View WiFi connections (allows accurate geolocation by retrieving available WiFi networks and comparing them against a database server side)
• connect and disconnect from WiFi (why ever would this be needed to order food? might be part of the above geolocation system)
• full network access (can access local area network, not necessary to just make HTTP(s) requests to a server
• Read Google service configuration (hard to find info on this one but appears to grant access to some account IDs and perhaps the Google login ID)
• Use accounts on the device (probably to see what accounts are available- more tracking

Now look at the data safety thing:

• Financial info may be shared with other companies for advertising or marketing
• App activity may be shared with other companies for advertising or marketing
• Device or other IDs may be shared with other companies for advertising or marketing

Personally though I think you could argue the ‘data safety’ screen is fraudulent- it mentions nothing about collecting location information, so why does the app need location info? Even if they are just collecting which mcdonalds you are near, that’s collecting location info.

---

Then you have the issue of the terms of service. As others have mentioned, if you agree to those terms, you waive your right to participate in any class action lawsuit against McDonalds. And even if you ignore this data collection issue, that right there should be a big reason to say HELL NO to this.