If the grocery store is selling your data (and they are) and meta has a connecting card number ads could be targeted.