Data Report Card · DoorDash
DoorDash Data Report Card
Food delivery
Data
Practices
Practices
1Access1Portability2Friction2Deletion0Sells1Trains AI
=
C
7/12
Agent
Readiness
Readiness
1Access
1Portability
0API access
=
D
2/6
Agent Readiness is a derived signal — a synthesis of two existing cells (Access, Portability) plus one sourced factor (API access), not an independently measured grade. API access scale: Best (2) consumer-grantable API · Moderate (1) partial / encumbered · Restrictive (0) manual export only. What is Agent Readiness?
Reviewed Jun 2026 · policies are checked weekly for changes · stated — every cell is read from DoorDash's published policy; none has been tested (run by us) yet.
1Accessstated
Self-serve "Request Archive" under Manage Account after 2-step verification, but DoorDash does not publish what categories the archive covers.
DoorDash Help — Download or delete my data · accessed Jun 2026 ↗1Portabilitystated
An archive is provided, but DoorDash does not state the file format (no documented
DoorDash Help — Download or delete my data · accessed Jun 2026 ↗JSON/CSV commitment), so machine-readability is unverified.2Frictionstated
Self-serve request flow inside the app/site after identity verification; archive delivered by email when ready.
DoorDash Help — Download or delete my data · accessed Jun 2026 ↗2Deletionstated
Self-serve "Delete Account" under Manage Account with 2-step verification; cannot delete with pending deliveries, and some data retained where legally permitted/required.
DoorDash Help — Download or delete my data · accessed Jun 2026 ↗0Sells / sharesstated
In Feb 2024 the California AG reached a $375,000 settlement finding DoorDash sold customer data via a marketing co-op without notice or opt-out (CCPA/CalOPPA); the policy offers a Do Not Sell or Share link but does not state GPC honoring.
California Attorney General — DoorDash settlement · accessed Jun 2026 ↗1Trains AIstated
DoorDash discloses developing "audience insights and look-alike models" from personal information but its policy contains no specific AI/ML training disclosure; opt-out exists only via the Do Not Sell or Share / personalization controls (scored conservatively).
DoorDash — Privacy Policy (US) · accessed Jun 2026 ↗0API access — feeds Agent Readiness, not the /12stated
DoorDash's developer APIs serve merchants and delivery logistics, not consumer self-data; a customer requests a copy of their data through the Manage Account page by choosing "Request Archive" after two-step verification.
DoorDash — download my personal information · accessed Jun 2026 ↗DoorDash has clean self-serve access and deletion but weak portability transparency and a documented 2024 CCPA enforcement finding that it sold customer data without notice or opt-out. Source-verified Jun 2026; all cells stated (read from published policy/support docs), none yet tested via live export.
How to request your data from DoorDash
- Go to https://help.doordash.com/en-us/consumers/article/i-want-to-delete-my-personal-information-data-from-doordash — DoorDash's data-request entry point.
- Account Settings → Manage Account → Request Archive.
- Expected wait: not stated; emailed when archive is ready — DoorDash's stated turnaround (we haven't independently timed a request yet).
- No self-serve option, or want a formal request? Contact DoorDash — Privacy Team: mailto:privacy@doordash.com.
These steps reflect DoorDash's documented process as of Jun 2026. The wait time is the company's stated figure, not yet independently measured by us.