[jrochkind1]

It's worth thinking about, but it's hard to say. Perhaps Google would voluntarily turn over the info without a search warrant, and/or would do it quietly without telling the customer even if not required by law to keep it quiet -- but the small pharmacy with the relationship with its customers would not. Perhaps law enforcement already has a relationship with google and established channels for accessing this info, whether with or without a court order.

[shadowgovt]

> Perhaps Google would voluntarily turn over the info without a search warrant

Not in general in this scenario. Google has made exceptions in the past (generally around an emergency with threat to life involved), but they're reluctant to make such exceptions for even federal LEO. State-level LEO, which is who would be making these requests, has far less leverage over Google; they could make it harder for Google to do business in their state, but (a) the states we're talking about are doing that already, so Google cares less about a lever that's already being pulled and (b) the states don't have higher authority to appeal to (what are they gonna do, try to make a Supreme Court case out of noncompliance with... A warrantless data request?).

[yunohn]

Ironically, you could just Google this, instead of speculating wildly?

They review, question, narrow, and reject requests for user info. They also notify users unless prevented by a court.

https://policies.google.com/terms/information-requests?hl=en

[Nextgrid]

Google's stalking can also deanonymize a user even if they used fake details and an anonymous payment method on the website.