Blog Post

Delete Uber if you want, but it still has your data

The ongoing uproar over the ethically challenged Uber has brought about calls to delete the service. And to my surprise, some people are actually doing this: I’ve already seen a few friends boast on Facebook that their Uber app is no more.

Leaving aside the question of whether these folks will return (my hunch is yes), the more interesting issue turns on the fact that it’s basically impossible to “delete” Uber in the first place.

While you can remove Uber’s app from your phone and submit a request to delete your account, you’re never really gone for good. I’ve pointed before to Uber’s privacy policy, which spells out that the company can keep your data — your ride history, your locations, all of it — as Uber sees fit and for as long as it likes:

Even after your account is terminated, we will retain your Personal Information and Usage Information (including geo-location, trip history, credit card information and transaction history) as needed to comply with our legal and regulatory obligations, resolve disputes, conclude any activities related to cancellation of an account (such as addressing chargebacks from your credit card companies), investigate or prevent fraud and other inappropriate activity, to enforce our agreements, and for other business reason. [emphasis mine]

“So what?” some might ask. After all, the feature that is currently freaking people out is Uber’s “God view,” which lets employees view every rider in real time. Historical data feels less dangerous.

The problem, however, is not so much Uber but what others might do with that data. According to lawyer Lee Tien of the Electronic Frontier Foundation, data retention turns companies like Uber into magnets for government snooping.

“We have urged companies that they shouldn’t reflexively keep customer data, and instead should get rid of it or safely de-identify it (a topic of its own) after it’s no longer needed,” Tien said in an email. “It creates both privacy and security problems.”

Government is just one part of the privacy problem. Uber’s customer logs (especially records showing where and when someone traveled) are also likely to provide a rich trove for divorce lawyers, employment investigators and a variety of civil lawsuits. [company]Facebook[/company], [company]Google[/company] and others are already popular targets for such subpoenas — it seems only a matter of time till they reach car services too.

Even though Uber’s policy states also states that “your data may be anonymized and aggregated” [my emphasis] after time, it provides no details about when or how that may take place. I asked the company to provide details, but a spokesperson just referred me a blog post that doesn’t address the issue.

It’s not entirely fair, of course, to single out Uber out over all this. After all, the privacy of other ride-sharing services appear to be no better.

But the fact that it’s impossible to “delete Uber” at all supports the venture capitalist Mark Suster’s view that, despite the fuss over Uber’s knuckle-headed business and PR tactics, it is the privacy issues that matter most.

5 Responses to “Delete Uber if you want, but it still has your data”

  1. Peter Fretty

    This is why it’s so important to read the privacy policies upfront, especially if you are not fully aware of how an organization will ultimately leverage your data going forward. We are often far too trusting in trade for convenience. Time to give these decisions second thoughts.

    Peter Fretty, j.mp/pfrettysa

  2. Coppell4704

    Facebook, twitter, Amazon, google, Uber, the US government all take and keep and data on you. It is amazing there shock regarding Uber. If Snowden didn’t open your eyes, Obama has dramatically increased used of `your data` to identify your party affiliation and your donation records to direct you to support his agenda…. And we are outraged at Uber and not politicians ? amazing..

  3. Anonymous

    A bigger problem is your cellphone, that can track your location via GPS at any point in time.
    Or your search history on Google.
    Or the websites you browse.
    Or what you just posted on Facebook via http:// (and not https://)

    There are hundreds if not thousands of “bigger privacy concerns” to worry about than Uber. The fact so many people are up in arms over this, and not the other stuff, is laughable. A bunch of media sheep.

    • Thanks for the comment. I agree with you to a point — yes, there may be bigger privacy concern and part of the Uber story is just media hype — but not entirely. One part of this you may be overlooking is the location records that Uber possesses.
      While cell phones do have a GPS that can be tracked, the phone carriers do not keep location records that can be subpoenaed in criminal or civl proceedings — Uber and the other car services do.

      • In the end Uber Scab will do itself in, they simply have behaved badly time after time, it just never stops with them, many people in the tech world had a lot of goodwill towards them and were on their side, but more and more people are rethinking that placement goodwill.