data report card

Data Report Card · Uber

Uber Data Report Card

Rides & Eats
§ Enforcement action
Data
Practices
1Access1Portability2Friction2Deletion1Sells1Trains AI
=
D
§
4/12
Agent
Readiness
1Access 1Portability 0API access
=
D
2/6

Agent Readiness is a derived signal — a synthesis of two existing cells (Access, Portability) plus one sourced factor (API access), not an independently measured grade. API access scale: Best (2) consumer-grantable API · Moderate (1) partial / encumbered · Restrictive (0) manual export only. What is Agent Readiness?

§ This grade reflects a 4-point deduction (severity 2) for a verified regulatory action: 8/12 on data practices − 4 = 4/12 → D. The enforcement record is below.

Help me make a request →
Reviewed Jun 2026  ·  some cells re-verified 9 Aug 2026 · policies are checked weekly for changes  ·  stated — every cell is read from Uber's published policy; none has been tested (run by us) yet.
1Accessstated
Self-serve download via Privacy Center after 2-step verification, but the export deliberately excludes SSN, mailing address, full card/bank details, received messages, and limits mobile event data to the last 30 days.
Uber Help — What's in your data download · accessed Jun 2026 ↗
1Portabilitystated
Download is delivered as organized folders/files, but Uber does not publish a clear machine-readable format commitment (no stated JSON/CSV guarantee) and excludes several categories.
Uber Help — Request a copy of your personal data · accessed Jun 2026 ↗
2Frictionstated
Fully self-serve through the Privacy Center; the user is notified by email or text when the file is ready to download.
Uber Help — Request a copy of your personal data · accessed Jun 2026 ↗
2Deletionstated
Self-serve account deletion via Privacy Center with a 30-day grace period during which signing back in restores the account; some data retained for legal/regulatory purposes.
Uber Help — Delete my Uber account · accessed Jun 2026 ↗
1Sells / sharesstated
Uber shares personal information for advertising and provides a Do Not Sell or Share My Personal Information link; GPC honoring is legally mandated in many states but Uber's own readable confirmation was not verifiable on the fetched pages (scored conservatively).
Uber Legal — Do Not Sell or Share · accessed Jun 2026 ↗
1Trains AIstated
Uber's own privacy notice states it uses data "for analysis, research and product development, including training machine learning models." The notice documents no user-facing opt-out for that use, so this is scored as trains-by-default.
Uber — US Privacy Notice · accessed 9 Aug 2026 ↗
§Enforcement action — deducts 4 points (severity 2); data practices without the penalty scored C (8/12)verified
The Dutch Data Protection Authority fined Uber €290 million in July 2024 for transferring European drivers' personal data to the US without adequate safeguards — Uber's third fine from the Dutch regulator.
Dutch Data Protection Authority · 22 Jul 2024 ↗
0API access — feeds Agent Readiness, not the /12stated
Uber's Riders developer API requires Uber approval and a business-development contact rather than open consumer registration; individuals obtain their own trip and account data through the self-service Privacy Center, signing in to request a downloadable file.
Uber — request a copy of your personal data · accessed Jun 2026 ↗
Uber offers strong self-serve access and deletion but the export omits major categories and lacks a published machine-readable-format guarantee; a Do-Not-Sell link exists and GPC is regionally mandated. Source-verified Jun 2026; all cells stated (read from published policy/support docs), none yet tested via live export.

Events

Breaches, policy changes, and export-format changes we’ve recorded at Uber — other parties’ actions, alongside the enforcement record above. An event never changes a grade by itself. All events →

25 Aug 2026Uber added a promise to its US privacy notice: it will not sell or share your phone number with third parties for marketing text messages.policy change
On the events page →

Grade history

Every change to this company’s grade since it was first published, and why. All grade changes →

9 Aug 2026Trains AI on your datasource

Score unchanged. Re-sourced to Uber's own US privacy notice, which states data is used “for analysis, research and product development, including training machine learning models,” with no opt-out documented.

Uber — US Privacy Notice ↗
Previously: Uber Engineering — ML for account security (Medium)

How to request your data from Uber

  1. Go to https://privacy.uber.com/center — Uber's data-request entry point.
  2. Privacy Center → Download your data.
  3. Expected wait: not stated; emailed/texted when ready (typically days) — Uber's stated turnaround (we haven't independently timed a request yet).
  4. No self-serve option, or want a formal request? Contact Uber — Privacy Team / DPO: https://help.uber.com/en/riders/article/submit-a-privacy-inquiry?nodeId=489292a2-27ce-42f5-9a47-d4dd017559fd.

These steps reflect Uber's documented process as of Jun 2026. The wait time is the company's stated figure, not yet independently measured by us.

Help me make a request →