I’m not sure how this works as the NHS app is supposed to be anonymous and only hold your postcode district, places you have visited with QR code on it, and any test results - no names, email addresses, phone numbers - but according to the Sunday Times some pub and restaurant chains are monetising this by selling on data from scans to 3rd parties for marketing purposes (and potentially scams).
Now on this one I have severe doubts about the story and quality of journalism - the whole reason we have Apple and Google running this app is privacy, they refused to cooperate with the original NHS version because it was so leaky. Plus the journalists haven’t questioned this end of the data chain at all. Either the story is false or we have been lied to about the privacy aspects of the app. 50/50 I suppose.
But, if true, I am 100% certain that the complete ugly bastard Tim Martin who runs Wetherspoons will be top of the pile in selling your data.