The Airlines Know More Than the Government
The most complete surveillance profile on you as a traveler isn't in a government database — it's sitting with your airline. And you handed most of it over voluntarily, in exchange for miles you'll probably never use.
The most comprehensive surveillance profile built on you as a traveler probably isn't in a government database. It's sitting with your airline.
And unlike the Automated Targeting System, you handed most of it over voluntarily — in exchange for miles you may never actually use.
What Airlines Actually Know About You
Let's start with what's in the system before you even get to the airport.
Your airline has your complete booking history across their network — every flight you've taken with them, every route, every fare class, going back years. They know how far in advance you typically book, which tells them something precise about your price sensitivity. They know what you paid on similar routes in the past, and that information feeds into the price they offer you the next time.
They have your seat preferences, which signal whether you're a regular upgrader, a window-seat loyalist, an aisle person who boards last because you've timed it exactly. Upgrade patterns, in particular, are informative: they suggest your rough income bracket and your willingness to pay for comfort, data points that are commercially useful far beyond your next flight.
They have the first eight digits of your credit card number. That might sound minor, but the first eight digits of a credit card identify the issuing bank and the card type. Your airline knows whether you're carrying a Platinum Amex, a mid-tier Visa, or a debit card. That tells them something about your financial profile with reasonable accuracy.
They know your meal preferences. Requesting a kosher or halal meal communicates religious observance. A vegan meal communicates something about lifestyle. A gluten-free request may signal a medical condition. Airlines aren't doing anything nefarious with this information specifically, but it's part of the behavioral profile they're building, and it flows to their systems.
And here's the one that always gets a reaction: if you're on a corporate travel program, airlines can identify when you and your employer are on the same flight. They're not doing this for sinister reasons — it's operationally relevant, and it affects how they handle irregular operations when both a boss and a subordinate are stranded. But it means that the organizational hierarchy implicit in your travel patterns is visible to the airline.
The Loyalty Program as Data Extraction Engine
Here's the mental model shift that changes how you think about frequent flyer programs.
Most people believe they're earning miles in exchange for loyalty. That's the transaction as presented. The actual transaction is different: you're providing your behavioral data to a system that primarily monetizes it through financial services partnerships.
Bank partnerships — co-branded credit cards, points-earning arrangements, spending incentives — account for roughly half the points earned in major frequent flyer programs and up to 71% of their cash flow. The airline-bank relationship is more intimate than most marriages: your airline is telling its bank partner what you buy, where you go, how you travel, and what you spend. The bank is using that data to refine its financial product targeting. You are the product being traded between them.
Hotel partners, car rental companies, and retail partners receive similar data flows. The profile that gets built across an alliance of commercial partners — airline, bank, hotel chain, rental car company — is more comprehensive than any single company's data. You opted into each relationship individually, probably without thinking much about the aggregate picture.
The points themselves are real, and there's nothing wrong with using them. But the next time you calculate whether the annual fee on your airline card is "worth it," add a line item for the value of the behavioral data you're providing in exchange. The bank's actuarial tables already have that number. You should too.
Dynamic Pricing and the Price You See
Airlines have sophisticated yield management systems that adjust fares based on demand, timing, available inventory, and increasingly, information about who's asking.
Some of this is legitimate and benign: last-minute seats cost more because that's when price-insensitive travelers book, and airlines price accordingly. But the personalization goes further than most people realize.
What you paid on a previous route affects what you're offered on the same route next time — the system has calibrated your price sensitivity based on your actual behavior. Your booking channel matters: traveling through a corporate booking tool signals that someone else may be paying, which affects the price offered. There's some evidence that devices and platforms matter too, though airlines are understandably opaque about their pricing logic.
Incognito mode helps partially for some of this — it prevents your browser from passing along data that might indicate you've already researched a flight — but it doesn't change what the airline already knows about you from your loyalty program membership, your booking history, or your corporate account.
Airline-to-Airline Data Sharing: More Limited Than You'd Think
Given how much airlines know about their own customers, you might assume they're freely sharing this data with partner airlines in their alliance networks. The reality is more complicated.
Security-related data sharing runs through governments, not directly between carriers. API and PNR data flows from airlines to government agencies; it doesn't flow horizontally from one airline to another. So if you have a file with Delta, Lufthansa doesn't have access to it simply because they're both in SkyTeam.
What does flow through alliances: operational data, frequent flyer status recognition, and limited loyalty-relevant information to facilitate the partner experience. Even there, sharing is more limited than it might appear. Customer data is the most valuable commercial asset airlines have, and close alliance partners are still commercial competitors. The incentive to share that asset is limited.
The practical takeaway: within a single airline's system, your profile is comprehensive and deeply integrated. Across alliance partners, the picture is more fragmented than you might expect.
What You Can Actually Control
This is where this article diverges from the rest of the series.
In Articles 1 through 5, the recurring theme is limited individual agency. The government data collection largely happens whether you like it or not. The ATS risk score accumulates. The passport stamp problem has no retroactive solution. The border search authority exists regardless of your preferences.
The commercial side is different. You opted into most of it. Which means you can opt out — or at least opt in more selectively.
Loyalty programs are optional. The miles and status benefits are real, but so is the cost in behavioral data. If you fly two or three times a year, the calculus looks different than if you fly every week. Do the math on whether you'll actually use the miles before you enroll. If you decide not to join, you've significantly reduced the commercial profile the airline can build on you.
Booking channels matter. Booking through a third-party site — an OTA, a travel agent — limits the direct data relationship between you and the airline. You may pay slightly different prices and lose some benefits, but you limit direct data collection. It's a trade-off. Make it deliberately.
Separate email addresses and payment methods for travel limit the degree to which your travel profile connects to your broader digital and financial profile. Low-effort compartmentalization, but it adds up.
EU travelers have meaningfully stronger rights. Under GDPR, EU residents can request access to their airline data, request corrections, and in some cases request deletion. American travelers don't have equivalent federal rights, though some states have enacted partial equivalents.
The co-branded card math deserves a moment. Annual fees run $95–$650, justified by sign-up bonuses and earning rates. The calculation most people do: how many miles will I earn versus how much will I spend? The one most people skip: what data am I providing to the bank through my spending patterns, and is the bank's cut of that already worth more than the fee I'm paying? Almost certainly yes. The card may still make sense — but do the full math.
The Frame Inversion
The first five articles were about data collection you didn't choose — systems built by governments with authority you can't negotiate away. The options are limited. The most you can do is understand the system and navigate it intelligently.
The commercial picture is almost the inverse. The airlines aren't running secret surveillance programs you had no way of knowing about. They're collecting data you gave them, in exchange for benefits you chose to accept, under terms that were technically disclosed even if nobody reads them. The surveillance is comprehensive. But you're a participant in it, not just a subject.
That's where the leverage is. You can't opt out of the Automated Targeting System. You can opt out of the United MileagePlus program. The government's interest in your travel data is largely unavoidable. The airline's interest in your data is contingent on your continued participation.
One of those you can change. Most people don't. They probably should.
This Series