Ok, bit of a false alarm. Prompted by Curtis, I built my own testing keyboard and confirmed that it doesn’t get access to text unless it’s the active keyboard. 🤔

The best I can figure is that something knew which store I was at (not difficult, particularly since I use Foursquare) and then, based on profiles of me, knew I’d probably be interested in particular meat snacks (likely correct!)