Alberta
Tim Hortons app violated privacy laws in collection of ‘vast amounts’ of sensitive location data

People who downloaded the Tim Hortons app had their movements tracked and recorded every few minutes of every day, even when their app was not open, in violation of Canadian privacy laws, a joint investigation by federal and provincial privacy authorities has found.
The investigation concluded that Tim Hortons’ continual and vast collection of location information was not proportional to the benefits Tim Hortons may have hoped to gain from better targeted promotion of its coffee and other products.
The Office of the Privacy Commissioner of Canada, Commission d’accès à l’information du Québec, Office of the Information and Privacy Commissioner for British Columbia, and Office of the Information and Privacy Commissioner of Alberta issued their Report of Findings today.
The Tim Hortons app asked for permission to access the mobile device’s geolocation functions, but misled many users to believe information would only be accessed when the app was in use. In reality, the app tracked users as long as the device was on, continually collecting their location data.
The app also used location data to infer where users lived, where they worked, and whether they were travelling. It generated an “event” every time users entered or left a Tim Hortons competitor, a major sports venue, or their home or workplace.
The investigation uncovered that Tim Hortons continued to collect vast amounts of location data for a year after shelving plans to use it for targeted advertising, even though it had no legitimate need to do so.
The company says it only used aggregated location data in a limited way, to analyze user trends – for example, whether users switched to other coffee chains, and how users’ movements changed as the pandemic took hold.
While Tim Hortons stopped continually tracking users’ location in 2020, after the investigation was launched, that decision did not eliminate the risk of surveillance. The investigation found that Tim Hortons’ contract with an American third-party location services supplier contained language so vague and permissive that it would have allowed the company to sell “de-identified” location data for its own purposes.
There is a real risk that de-identified geolocation data could be re-identified. A research report by the Office of the Privacy Commissioner of Canada underscored how easily people can be identified by their movements.
Location data is highly sensitive because it can be used to infer where people live and work, reveal trips to medical clinics. It can be used to make deductions about religious beliefs, sexual preferences, social political affiliations and more.
Organizations must implement robust contractual safeguards to limit service providers’ use and disclosure of their app users’ information, including in de-identified form. Failure to do so could put those users at risk of having their data used by data aggregators in ways they never envisioned, including for detailed profiling.
The investigation also revealed that Tim Hortons lacked a robust privacy management program for the app, which would have allowed the company to identify and address many of the privacy contraventions the investigation found.
The four privacy authorities recommended that Tim Hortons:
- Delete any remaining location data and direct third-party service providers to do the same;
- Establish and maintain a privacy management program that: includes privacy impact assessments for the app and any other apps it launches; creates a process to ensure information collection is necessary and proportional to the privacy impacts identified; ensures that privacy communications are consistent with, and adequately explain app-related practices; and
- Report back with the details of measures it has taken to comply with the recommendations.
Tim Hortons agreed to implement the recommendations.
QUOTES
“Tim Hortons clearly crossed the line by amassing a huge amount of highly sensitive information about its customers. Following people’s movements every few minutes of every day was clearly an inappropriate form of surveillance. This case once again highlights the harms that can result from poorly designed technologies as well as the need for strong privacy laws to protect the rights of Canadians.”
“This report eloquently illustrates the risks inherent in the use of geolocation and the importance of transparent and accountable privacy practices. Without a suitable prior assessment, Tim Hortons collected sensitive information about its customers through its app, without their adequate knowledge or consent. It is to put an end to this kind of practice that Quebec has reviewed its legislation protecting personal information giving more powers to the Commission and making companies more accountable. ”
“This investigation sends a strong message to organizations that you can’t spy on your customers just because it fits in your marketing strategy. Not only is this kind of collection of information a violation of the law, it is a complete breach of customers’ trust. The good news in this case is that Tim Hortons has agreed to follow the recommendations we set out, and I hope other organizations can learn from the results of this investigation.”
“This investigation is yet another example where an organization has not effectively notified customers about its practices. Tim Hortons’ customers did not have adequate information to consent to the location tracking that was actually occurring. When people download and use these types of apps, it’s important that they know in advance what will happen to their personal information and that organizations follow through with their commitments.”
Agriculture
Lacombe meat processor scores $1.2 million dollar provincial tax credit to help expansion

Alberta’s government continues to attract investment and grow the provincial economy.
The province’s inviting and tax-friendly business environment, and abundant agricultural resources, make it one of North America’s best places to do business. In addition, the Agri-Processing Investment Tax Credit helps attract investment that will further diversify Alberta’s agriculture industry.
Beretta Farms is the most recent company to qualify for the tax credit by expanding its existing facility with the potential to significantly increase production capacity. It invested more than $10.9 million in the project that is expected to increase the plant’s processing capacity from 29,583 to 44,688 head of cattle per year. Eleven new employees were hired after the expansion and the company plans to hire ten more. Through the Agri-Processing Investment Tax Credit, Alberta’s government has issued Beretta Farms a tax credit of $1,228,735.
“The Agri-Processing Investment Tax Credit is building on Alberta’s existing competitive advantages for agri-food companies and the primary producers that supply them. This facility expansion will allow Beretta Farms to increase production capacity, which means more Alberta beef across the country, and around the world.”
“This expansion by Beretta Farms is great news for Lacombe and central Alberta. It not only supports local job creation and economic growth but also strengthens Alberta’s global reputation for producing high-quality meat products. I’m proud to see our government supporting agricultural innovation and investment right here in our community.”
The tax credit provides a 12 per cent non-refundable, non-transferable tax credit when businesses invest $10 million or more in a project to build or expand a value-added agri-processing facility in Alberta. The program is open to any food manufacturers and bio processors that add value to commodities like grains or meat or turn agricultural byproducts into new consumer or industrial goods.
Beretta Farms’ facility in Lacombe is a federally registered, European Union-approved harvesting and meat processing facility specializing in the slaughter, processing, packaging and distribution of Canadian and United States cattle and bison meat products to 87 countries worldwide.
“Our recent plant expansion project at our facility in Lacombe has allowed us to increase our processing capacities and add more job opportunities in the central Alberta area. With the support and recognition from the Government of Alberta’s tax credit program, we feel we are in a better position to continue our success and have the confidence to grow our meat brands into the future.”
Alberta’s agri-processing sector is the second-largest manufacturing industry in the province and meat processing plays an important role in the sector, generating millions in annual economic impact and creating thousands of jobs. Alberta continues to be an attractive place for agricultural investment due to its agricultural resources, one of the lowest tax rates in North America, a business-friendly environment and a robust transportation network to connect with international markets.
Quick facts
- Since 2023, there are 16 applicants to the Agri-Processing Investment Tax Credit for projects worth about $1.6 billion total in new investment in Alberta’s agri-processing sector.
- To date, 13 projects have received conditional approval under the program.
- Each applicant must submit progress reports, then apply for a tax credit certificate when the project is complete.
- Beretta Farms has expanded the Lacombe facility by 10,000 square feet to include new warehousing, cooler space and an office building.
- This project has the potential to increase production capacity by 50 per cent, thereby facilitating entry into more European markets.
Related information
Alberta
Alberta Next: Alberta Pension Plan

From Premier Danielle Smith and Alberta.ca/Next
Let’s talk about an Alberta Pension Plan for a minute.
With our young Alberta workforce paying billions more into the CPP each year than our seniors get back in benefits, it’s time to ask whether we stay with the status quo or create our own Alberta Pension Plan that would guarantee as good or better benefits for seniors and lower premiums for workers.
I want to hear your perspective on this idea and please check out the video. Get the facts. Join the conversation.
Visit Alberta.ca/next
-
COVID-192 days ago
Court compels RCMP and TD Bank to hand over records related to freezing of peaceful protestor’s bank accounts
-
Energy2 days ago
B.C. Residents File Competition Bureau Complaint Against David Suzuki Foundation for Use of False Imagery in Anti-Energy Campaigns
-
C2C Journal2 days ago
Canada Desperately Needs a Baby Bump
-
conflict1 day ago
US airstrike on Iran’s nuclear facilities. Was it obliteration?
-
Agriculture1 day ago
Lacombe meat processor scores $1.2 million dollar provincial tax credit to help expansion
-
Daily Caller14 hours ago
Trump’s One Big Beautiful Bill Resets The Energy Policy Playing Field
-
Business2 days ago
National dental program likely more costly than advertised
-
Crime1 day ago
The Left Thinks Drug Criminalization Is Racist. Minorities Disagree