Deny you medical care payouts based on your diet. Algorithmically increase prices on you. Increase your car insurance based on where you travel.

The answer to all of these things is legislative/regulatory, not forbidding McD from collecting the most basic information about what their customers buy.

The answer is both things. Legislation should forbid misuse of data with company officers being personally liable in the same manner as Sarbanes-Oxley, and should be so strictly enforced that holding data about individuals becomes seen as a liability instead of an asset.