Credit card companies sell there information to however wants it.

Like the government has time to sift through an innocent (mostly) guys bank records. They don't even have time to do their job properly. Until they get many more tax dollars and can start the STOPS (Sifting Through Ordinary Peoples' Stuff) program, you've got nothing to worry about. Now once you start getting bigger, and selling to a bunch of people, then you have to worry about your power usage. In that case, yes, you would need to worry about paper trails.