Frequent flier program raises privacy, security questions