The store owner owns the private keys. The stores themselves only get access to the pubkeys. Or they use a service that holds all the keys for them.

Unlike with physical cash, you can easily put any arbitrary amount of physical separation between the place the transaction occurs and the place the money is "stored".