If you purchased in the US using a discount card (eg: GoodRx), they get transaction level data from the pharmacy and can use that to retarget / market to you. It’s not PHI / HIPAA protected since it’s not flowing through insurance and is transaction data.