ps I'm also not sure the InstaCart thing is rightly called surveillance. Your partner ordered some food from them that was later identified as contaminated, right? They don't need to see or gather any data they weren't already to send that notice.