Reviewed Jun 2026 · policies are checked weekly for changes · stated — every cell is read from DoorDash's published policy; none has been tested (run by us) yet.
1Sells / sharesstated
DoorDash's policy offers a "Do Not Sell or Share" link for ad-related sharing, but does not state that it honors Global Privacy Control signals. The February 2024 California Attorney General settlement over co-op data sales sits in the enforcement record below and deducts from the grade there.
DoorDash — Privacy Policy (US) · accessed Jun 2026 ↗
1Trains AIstated
DoorDash discloses developing "audience insights and look-alike models" from personal information but its policy contains no specific AI/ML training disclosure; opt-out exists only via the Do Not Sell or Share / personalization controls (scored conservatively).
DoorDash — Privacy Policy (US) · accessed Jun 2026 ↗
§Enforcement action — deducts 2 points (severity 1); Policy grade without the penalty: C (8/12)verified
California's Attorney General reached a $375,000 CCPA/CalOPPA settlement with DoorDash in February 2024, finding the company sold customer data through a marketing co-operative without notice or an opt-out.
California Attorney General · 21 Feb 2024 ↗
DoorDash has clean self-serve access and deletion but weak portability transparency. Cells rest on DoorDash's own published statements; the 2024 California Attorney General settlement over co-op data sales is carried in the enforcement record, which deducts from the grade. Source-verified Jun 2026; all cells stated (read from published policy/support docs), none yet tested via live export.
Events
Breaches, policy changes, and export-format changes we’ve recorded at DoorDash — other parties’ actions, alongside the enforcement record above. An event never changes a grade by itself. All events →
No events on record for DoorDash.
Grade history
Every change to this company’s grade since it was first published, and why. All grade changes →
12 Aug 2026Sells / shares your data0→1score
The February 2024 settlement bore this cell's score directly. Under the two-lane rule the cell now scores DoorDash's own stated “Do Not Sell or Share” link, and the settlement moves to the enforcement record, where it now applies the standard −2 deduction it previously did not. Data practices 7/12 → 8/12 with a −2 enforcement deduction; the grade is unchanged at C.
DoorDash — Privacy Policy (US) ↗Previously: California Attorney General — DoorDash settlement