It is perfectly reasonable for the delivery service to be trusted. After all, they're going to take the physical package, so the business must trust them, and need to know where to deliver it, so the individual must trust them. An individual can request a token for the business and the delivery service can validate it, without the address ever being given to the business.
None of this requires a blockchain to make it slower and inexplicably public.