Almost none of the conduct driving this campaign happened in a store. In Georgia, three former sheriff's deputies were arrested in August on charges that they used Flock license plate data to track people with whom they had personal relationships, The New York Times reported [6]. In May, 404 Media reported that Texas deputies tapped Flock's database during a probe involving a woman suspected of carrying out a self-administered abortion [7]. The retailer's camera plays no role in either account, yet the retailer's name is the one on the petition. That is the mechanism worth understanding before a renewal: the signature buys a sensor, and the reputational exposure is created later by whoever queries the pool it feeds.
Ulta's answer rests on scale, and that argument cuts both ways. Do the arithmetic on the figure the company gave Business Insider and the contested footprint is roughly 15 stores at most [17]. Jenna Sherman of Ultraviolet argues the retail theft justification does not cover tracking every inbound and outbound customer, and put it as using "a shotgun to kill a fly" [14]; she also says retailers help normalize AI surveillance and feed ordinary people's data into a network reachable by actors who do not share their interests [15]. The smaller the deployment a retailer claims, the harder it becomes to argue that losing it would cost anything.
Law enforcement officers told Business Insider that Flock cameras have been instrumental in solving cases [10], and Flock says its plate readers do not use facial recognition, and that private customers control how long data is retained and whether it is shared with police [11]. That counter-case is real. The problem is that a crime-fighting defense obliges a retailer to defend someone else's hit rate. Business Insider reported in July that Flock cameras in Roseville, California misread plates in 71% of alerts sent to police across 2023 and 2024 [8], and its March investigation described misreads sending officers after the wrong person [9]. Rachel LaPointe, whose Substack covers gendered police violence, told Business Insider her objection began with reported uses of the system to track women [18].
The evidence of commercial damage is thin. That observation describes the record; it doesn't defend the contracts. What the record contains is a petition, a video, a spokesperson's statement, and municipal cancellations counted by an activist tracker whose spokesperson did not respond to Business Insider [4]. No retailer is reported to have dropped Flock. Lowe's and Kroger are named as customers by Flock itself [12] and neither is quoted answering the criticism, and Flock's own spokesperson did not respond [13]. So far the measurable cost is attention, which is cheaper than a canceled contract and also faster to accumulate.
The lever that exists today is contractual rather than rhetorical. By Flock's own description, retention length and police sharing are customer settings [11], which means a retailer can decide in a procurement meeting what it will be able to say in public six months later. This quarter that choice looks like a loss-prevention renewal. Next quarter it looks like a line in someone else's campaign, and the retailer either has the retention number to hand or does not.