Data Report Card · Uber
Uber Data Report Card
Rides & Eats
§ Enforcement action
Data
Practices
Practices
1Access1Portability2Friction2Deletion1Sells1Trains AI
=
D
§
4/12
Agent
Readiness
Readiness
1Access
1Portability
0API access
=
D
2/6
Agent Readiness is a derived signal — a synthesis of two existing cells (Access, Portability) plus one sourced factor (API access), not an independently measured grade. API access scale: Best (2) consumer-grantable API · Moderate (1) partial / encumbered · Restrictive (0) manual export only. What is Agent Readiness?
§ This grade reflects a 4-point deduction (severity 2) for a verified regulatory action: 8/12 on data practices − 4 = 4/12 → D. The enforcement record is below.
Reviewed Jun 2026 · policies are checked weekly for changes · stated — every cell is read from Uber's published policy; none has been tested (run by us) yet.
1Accessstated
Self-serve download via Privacy Center after 2-step verification, but the export deliberately excludes SSN, mailing address, full card/bank details, received messages, and limits mobile event data to the last 30 days.
Uber Help — What's in your data download · accessed Jun 2026 ↗1Portabilitystated
Download is delivered as organized folders/files, but Uber does not publish a clear machine-readable format commitment (no stated
Uber Help — Request a copy of your personal data · accessed Jun 2026 ↗JSON/CSV guarantee) and excludes several categories.2Frictionstated
Fully self-serve through the Privacy Center; the user is notified by email or text when the file is ready to download.
Uber Help — Request a copy of your personal data · accessed Jun 2026 ↗2Deletionstated
Self-serve account deletion via Privacy Center with a 30-day grace period during which signing back in restores the account; some data retained for legal/regulatory purposes.
Uber Help — Delete my Uber account · accessed Jun 2026 ↗1Sells / sharesstated
Uber shares personal information for advertising and provides a Do Not Sell or Share My Personal Information link; GPC honoring is legally mandated in many states but Uber's own readable confirmation was not verifiable on the fetched pages (scored conservatively).
Uber Legal — Do Not Sell or Share · accessed Jun 2026 ↗1Trains AIstated
Uber uses anonymized trip/order history to train ML models (e.g. account-security fraud detection); no clear user-facing opt-out for AI/ML training was found, scored conservatively.
Uber Engineering — ML for account security · accessed Jun 2026 ↗§Enforcement action — deducts 4 points (severity 2); data practices without the penalty scored C (8/12)verified
The Dutch Data Protection Authority fined Uber €290 million in July 2024 for transferring European drivers' personal data to the US without adequate safeguards — Uber's third fine from the Dutch regulator.
Dutch Data Protection Authority · 22 Jul 2024 ↗0API access — feeds Agent Readiness, not the /12stated
Uber's Riders developer API requires Uber approval and a business-development contact rather than open consumer registration; individuals obtain their own trip and account data through the self-service Privacy Center, signing in to request a downloadable file.
Uber — request a copy of your personal data · accessed Jun 2026 ↗Uber offers strong self-serve access and deletion but the export omits major categories and lacks a published machine-readable-format guarantee; a Do-Not-Sell link exists and GPC is regionally mandated. Source-verified Jun 2026; all cells stated (read from published policy/support docs), none yet tested via live export.
How to request your data from Uber
- Go to https://privacy.uber.com/center — Uber's data-request entry point.
- Privacy Center → Download your data.
- Expected wait: not stated; emailed/texted when ready (typically days) — Uber's stated turnaround (we haven't independently timed a request yet).
- No self-serve option, or want a formal request? Contact Uber — Privacy Team / DPO: https://help.uber.com/en/riders/article/submit-a-privacy-inquiry?nodeId=489292a2-27ce-42f5-9a47-d4dd017559fd.
These steps reflect Uber's documented process as of Jun 2026. The wait time is the company's stated figure, not yet independently measured by us.