Given current technology the choices are to either hold something that a hundred other people held that day before you or to use your own phone with an app.
Applications do have choices when it comes to permissions. Just because it’s an app doesn’t mean it has to be intrusive.
That said, there’s no way a national chain would put out an app without collecting data.
They make more money by porting it to PC after a couple years rather than keeping it exclusive forever.