Grocers have heard this pitch before. In 2020, Instacart called it a lifeline. It was a leash. Every few years, Silicon Valley finds a new way to tell grocers that giving away their customer relationships is a gift.
This time it’s called the Universal Commerce Protocol.
Google launched UCP at NRF in January1 with a guest list built to make you feel safe: Walmart, Target, Shopify, plus Visa, Mastercard, and Amex. The pitch is seductive. Shoppers talk to Gemini, build a basket in conversation, and check out without leaving the chat. You keep your data. You keep your payments. You stay the “Merchant of Record.”
Read that last part again, because it’s the whole trick.
Google lets grocers keep the title while it takes their job. Merchant of Record means you handle the transaction. It says nothing about whether the customer ever sees your name, opens your app, or forms a single thought about your brand. You become the warehouse. Gemini becomes the storefront.
Google is selling five promises. Let's see who actually pays for each one:
1. The Universal Cart Kills the Part of the Basket That Pays Your Rent
A grocery store isn’t a vending machine. It’s a psychological environment engineered to push the customer into buying more than they came for. It’s the endcap, the impulse rack, and the private label set at eye level next to the national brand at a 30% better margin. None of that is an accident. It’s the profit model.
Hand basket construction to Gemini. The customer says, "Add milk," and the AI adds milk. Not your store brand, where you make money. Whatever the model picks, optimized for the customer and the platform, never for you. Private label penetration is one of the few margin levers a mid-tier grocer fully controls, and an AI basket-builder doesn’t know your store brand exists.
You don’t get a smarter cart. You get a smaller, lower-margin one, and you get to fulfill it.
2. “Smart Substitutes” Is You Mailing Google Your Weak Spots
This is the one that should keep you up at night.
To make substitutions work, you feed real-time inventory into Google Merchant Center. Sounds operational. It’s the most dangerous line item in the whole protocol.
Every substitution is a confession. It says a primary item was out of stock. Captured once, it’s noise. Captured across thousands of orders, it becomes a map of exactly where your inventory accuracy fails, which categories chronically stock out, and which supply chain relationships are quietly broken. That’s not marketing data. That’s operational intelligence, the kind that drives replenishment and forecasting and hits your margin directly.
We have already watched this movie. Instacart built the Consumer Insights Portal on data from nearly 100,000 stores2, then launched Data Hub at CES3, a clean room reselling first-party purchase signals to the CPG brands you negotiate against every year. Your weak spots are refined by their AI and sold to the other side of your own negotiating table.
UCP asks for the same confession, except now it’s a live, structured feed piped straight into the largest AI company on earth. A company whose stated job is finding “the best value for the consumer,” which is corporate for routing your shopper to whoever has the item cheaper.
You’re not enabling smart substitutes. You’re handing Google the schematic to your vulnerabilities and trusting it never to use them. Read the protocol docs. The word “consumer” shows up a lot more than the word “you.”
3. Local Delivery Means You Do the Work, Google Gets the Loyalty
Plug your fulfillment directly into Google’s ecosystem and compete with the big chains. Sounds great. Look at who pays for what.
You run the stores, staff the pickers, and carry the costs of the cold chain and failed-delivery refunds. Google contributes an API. When it works, the customer thinks “Gemini got me my groceries,” not “my grocer nailed that delivery.” You did the work. Google banked the loyalty.
I call this the ALDI special: pay a platform to run your storefront, then pay again when it sells your secrets back to your suppliers.
4. “Merchant of Record” Is a Legal Fiction, Not a Brand
Google’s cleverest line is that you keep full ownership of customer data, transaction history, and payments.
Fine. Who cares?
Loyalty in grocery isn’t built in a payment ledger. It’s built in the thousand small moments of the trip, the trust that the produce is fresh, the habit of the weekly run, and the feeling that this is my store. Replace all of that with a Gemini conversation, and what do you own? A row in a database confirming a faceless basket got paid for.
That’s not a customer relationship. It’s a receipt. Google keeps the part that compounds. You keep the part that gets audited.
5. Micro-Promotions Are a Race to the Bottom With a Friendly UI
The brisket-bundle demo is slick. But the chat window is a frictionless comparison engine. The instant your promotion appears, the AI can place it next to every competitor’s offer on the same items, in the same breath, with zero switching cost. Google already pilots exactly this, called Direct Offers4.
You’re not running a clever promotion. You’re in a live auction against every grocer in the market, refereed by the company that profits no matter who wins.
In a 1-3% margin business, “real-time discount optimization” is a polite name for the thing that kills you.
The Pattern Is Always the Same
Strip the jargon, and UCP is the oldest platform move there is. A company that owns distribution offers to “help” a margin-thin industry reach customers, in exchange for sitting between that industry and its customers forever.
The help is real. So is the dependency.
Walmart and Target can afford this game. A 200-store regional grocer isn’t negotiating with Google. It’s accepting an SDK.
AI is a capability, not a strategy, and UCP is a capability too. The question is whose strategy it serves. Google’s is clear: become the front door to all commerce and rent that doorway back to everyone who used to own it.
Yours should be the opposite. Own the interface. Own the relationship. Own the data that trains the AI that decides who wins this industry over the next decade.
That means the unglamorous work. Build an app your customers actually open. Keep your first-party data. Point your AI at the back room before you point it at the storefront. None of it demos as well as the basket building itself in real time. But all of it is yours.
Google built you a beautiful cage and labeled it a doorway. The grocers who walk in keep their title and lose their business. The ones who stay out keep both.
You can be the Merchant of Record. Or you can be the merchant.
"New tech and tools for retailers to succeed in an agentic shopping era." Google Ads & Commerce Blog: https://blog.google/products/ads-commerce/agentic-commerce-ai-tools-protocol-retailers-platforms.
“Instacart Introduces Consumer Insights Portal.” Progressive Grocer: https://progressivegrocer.com/instacart-introduces-consumer-insights-portal.
"Instacart Debuts Data Hub, a Clean Room Offering for Enhanced Media Performance." Instacart: https://investors.instacart.com/news-releases/news-release-details/instacart-debuts-data-hub-clean-room-offering-enhanced-media.
New tech and tools for retailers to succeed in an agentic shopping era." Google Ads & Commerce Blog: https://blog.google/products/ads-commerce/agentic-commerce-ai-tools-protocol-retailers-platforms.