Whole Foods Quietly Asks for Your Palm Print

No phone, no card, no problem! All Whole Foods stores will accept a palm-based biometric payment technology by the end of the year, Amazon announced on Thursday. To use the payment method, called Amazon One, shoppers will simply hover their hand over a scanner near check-out. Amazon intends to market the technology for widespread use by retailers, ticketing agencies, office security providers and others, so this convenience is poised to grow. But before you give Amazon full access to the unique biometric identifiers held in your palm, think carefully about the price of that convenience.

How does the Whole Foods payment work?

Customers can sign up for Amazon One at a kiosk or at the check-out counter, by inserting their credit card and hovering their hand over a special scanning device. The system will read unique identifiers on your palm, such as lines, ridges and vein patterns, and link that profile to your credit card. Amazon Prime members may also link their membership to the profile to receive Prime discounts.

How widespread is Amazon One?

In addition to its use in Whole Foods and Amazon Fresh stores, the company anticipates growing demand for the technology. Panera Bread, entertainment venues, travel stores and more are already offering Amazon One at various locations. Coors Field, where Colorado's Major League Baseball teams play, uses the technology to confirm that customers are 21 or older, and to accept payment for beer or alcohol.

Subscribe to Kiplinger’s Personal Finance

Be a smarter, better informed investor.

Save up to 74%

Sign up for Kiplinger’s Free E-Newsletters

Profit and prosper with the best of expert advice on investing, taxes, retirement, personal finance and more - straight to your e-mail.

Profit and prosper with the best of expert advice - straight to your e-mail.

Sign up

Privacy and security concerns

It's easy to image a scenario where you just don't want to carry your wallet or phone, such as at a large sporting event or at a theme park. But what do you give up in return for the convenience of a biometric-gathering service like Amazon One?

First, Amazon One is different from other biometric payment systems, explained three U.S. Senators in a 2021 letter to the company. "In contrast with biometric systems like Apple’s Face ID and Touch ID or Samsung Pass, which store biometric information on a user’s device, Amazon One reportedly uploads biometric information to the cloud, raising unique security risks." 

Amazon has certainly faced issues with cloud-based data security and privacy. Just last May, the company agreed to pay $30 million to settle two cases alleging privacy violations involving the company's Alexa and Ring units — $25 million for Alexa and $5 for Ring, respectively.  The company also allegedly retained private data for use as an A.I. training dataset. 

Second, Amazon states that it will not share Amazon One identity data with any third party and will not tie the data to marketing efforts. It also promises not to share data with any government "unless we're required to comply with a legally valid and binding order." That's an important assurance to those who criticized the company for selling facial recognition software to police departments. Still, biometric data raises complex privacy issues that our state and federal governments are still parsing.

On the plus side, scanning a palm is far better than gathering biometric data on a face or iris. No one will recognize you by your palm alone, and as the company points out, hovering over the Amazon One device is an intentional motion; you won't be identified without your consent. 

Waive the wave

Sure, Amazon One would be nice to have on certain occasions when you're just wearing your bathing suit or dancing at a club, but is it worth it? For that small bit of convenience, you cede another bit of your unique information to big tech. Our advice? Take a hard pass.