"Your bank would only see..." I'm sure that's true. Problem is the banks data combined with the retailers transaction data completely doxxes you so in the end it's trivial for the state to get this info whenever they want it.