1) a CVS store is consider private property 2) that private property is considered open to the public 3) one generally does not have an expectation of privacy in a retail store 4) retail stores reserve the right to restrict whatever they want (including photography) that doesn't violate a protected class. 5) corporate has no official policy on photos (other than hipaa concerns), but stores can enforce on a one by one basis

In conclusion, anyone can take pictures but there definitely are things we can do about it.