But it's not like you or anyone here can show the damage to privacy or otherwise a fast food app is going to have versus the very real conveniences others have brought up here.

McDonald's privacy page:

The information we have obtained includes the following:

    Identifiers such as name, postal and email addresses, internet protocol (IP) address, social media handles, username, password, and other contact information used to register and access McDonald’s products and services, log-in to Wi-Fi, enter one of our competitions, or contact us by phone or through our online services. The following categories of personal information described in California Civil Code § 1798.80(e):
        the personal information listed in the preceding bullet point as “identifiers;”
        signatures;
        telephone number;
        payment information (including payment card details or online payment services number and invoicing address) and financial information (such as bank account numbers);
        physical characteristics or description; and
        the other information that identifies, relates to, describes, or is capable of being associated with, a particular individual that we describe in “Information We Collect & Process.” 
    Commercial information, including:
        records of products or services purchased or received from McDonald’s;
        username, password, or other account information used to obtain access to McDonald’s online services;
        information on actions taken on McDonald’s online services, which may include information about McDonald’s products or services considered and the times you visit our online services; and
        information about consumer preferences and behavior that we collect on our online services or purchase from third parties in order to target consumers for digital advertisements or to personalize content we deliver on our online services.
    Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement, as well as the information listed above in the section titled “Information We Collect & Process:”
        computer or mobile-device operating system and browser type;
        type of mobile device and its settings;
        unique device identifier (UDID) or mobile equipment identifier (MEID) for your mobile device;
        device and component serial numbers;
        advertising identifiers (for example, IDFAs and IFAs) or similar identifiers;
        referring website (a site that has led you to ours) or application;
        online activity on other websites, applications, or social media; and
        activity related to how you use our online services, such as the pages you visit on our online services.
    Geolocation data.
    Characteristics of protected classifications under California or federal law, such as demographic information like age or gender.
    Audio information from calls placed with customer service centers which may be recorded, and electronic information in the form of Internet or other electronic network activity information as described above.  When you visit our restaurants, we may capture audio and video information inside and outside our restaurants via CCTV cameras and other tools that help us monitor restaurant safety and improve our operations.
    Inferences drawn from:
        the information we collect when you visit our websites, use our apps, interact with our official social media pages, or otherwise interact with us;
        information we collect, including through third-party suppliers, regarding content and other data posted on the Internet (such as public locations on the Internet); and
        information about consumer preferences and behavior that we collect on our online services or purchase from third parties in order to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, or aptitudes.
    Sensitive personal information, such as account login credentials when combined with passwords, and precise geolocation data, as described above. If you win a competition, contest, prize draw, or sweepstakes, we may also collect your social security number and driver’s license or state identification card as part of legal compliance.