How to Protect Your Privacy When Using Rideshare Apps

Rideshare apps like Uber and Lyft have become an essential part of daily transportation for millions of Americans. But every ride you take creates a detailed digital record — where you went, when, how often, and how you paid. These apps collect far more data than most riders realize, and that data can be shared with third parties, subpoenaed by law enforcement, or exposed in a data breach. Here is how to use rideshare apps while protecting your privacy.

What Data Do Rideshare Apps Collect?

Uber and Lyft collect extensive data about every rider:

• Identity information: Full name, email address, phone number, profile photo, and date of birth
• Payment data: Credit card numbers, bank account details, and complete transaction history
• Precise location data: GPS coordinates tracked before, during, and sometimes after your ride. If you leave location permissions on "Always," the app may track you even when you are not actively using it
• Trip history: A complete log of every pickup location, destination, route taken, time of day, and duration
• Device data: Phone model, operating system, IP address, advertising identifiers, and sensor data including accelerometer and gyroscope readings
• Contact information: If you grant permissions, access to your phone contacts
• Communication data: Messages sent through the app between you and your driver

How Rideshare Apps Share Your Data

Both Uber and Lyft share rider data with various third parties:

• Advertising partners: Aggregated usage data and device identifiers are shared with ad networks to serve targeted advertising
• Insurance companies: Trip data may be shared with insurance providers for claims processing and risk assessment
• Analytics companies: Third-party analytics firms receive usage data to help improve app functionality and business operations
• Law enforcement: Rideshare companies comply with subpoenas, warrants, and government requests for trip data
• City governments: Anonymized trip data is shared with city planning departments in some municipalities

How to Protect Your Privacy

Limit Location Tracking

1. Set location to "While Using": On both iOS and Android, change the app's location permission to "While Using the App" instead of "Always." This prevents the app from tracking you when you are not actively requesting a ride
2. Close the app after your ride: Force-close the rideshare app when you arrive at your destination to stop any background data collection
3. Avoid saving home and work addresses: While convenient, saved locations create a permanent record of your most sensitive addresses in the app's servers

Protect Your Identity

1. Use a nickname: Uber allows you to use a first name that is different from your legal name. Use a common first name to reduce identifiability
2. Use a secondary phone number: Consider using a Google Voice number or burner number for your rideshare account to keep your real phone number private
3. Use a privacy-focused email: Sign up with an email address that is not linked to your primary identity
4. Remove your profile photo: While some services require a photo, remove it if the option exists. Your face combined with location data makes you highly identifiable

Manage Your Data

1. Download your data: Both Uber and Lyft allow you to download all data they have collected about you. Review it to understand the scope of collection
2. Delete trip history: Uber allows you to request deletion of your trip history through their privacy settings. Lyft offers similar options
3. Opt out of data sharing: Check the privacy settings in both apps for options to limit data sharing with third parties and advertisers
4. Turn off personalized ads: Disable personalized advertising in both the rideshare app and your phone's general settings

Use Pickup and Dropoff Offsets

One of the simplest privacy strategies is to avoid being picked up or dropped off at your exact address:

• Set your pickup location a block or two away from your home
• Be dropped off near but not directly at sensitive destinations like a therapist's office, attorney's office, or medical facility
• Vary your pickup and dropoff points to prevent pattern analysis

After a Rideshare Data Breach

Both Uber and Lyft have experienced significant data breaches in the past. If a rideshare company reports a breach:

1. Change your rideshare account password immediately
2. Change passwords on any accounts that share the same credentials
3. Monitor your bank and credit card statements for unauthorized charges
4. Enable two-factor authentication on your rideshare account
5. Consider freezing your credit if payment data was exposed
6. Watch for phishing attempts that impersonate the rideshare company

Privacy Settings Quick Reference

Uber

• Privacy Settings: Account → Privacy → Privacy Center
• Download Your Data: Account → Privacy → Download Your Data
• Delete Account: Account → Privacy → Delete Account

Lyft

• Privacy Settings: Settings → Personal Info → Privacy
• Download Your Data: Request through support or privacy policy page
• Delete Account: Settings → Personal Info → Delete Account

Rideshare apps are convenient, but they do not need to know everything about your life. Take 10 minutes today to review your privacy settings, limit location permissions, and clean up your trip history.