Lyft says it takes 'reasonable' steps to protect your personal data from unauthorized access or misuse, but this is a general commitment without specifying what security measures are actually in place.
Lyft's security commitment is expressed as a general 'reasonable measures' standard without specifying technical safeguards, meaning you have limited visibility into how well your precise location history, payment data, and personal information are actually protected against breaches.
Cross-platform context
See how other platforms handle Data Security and similar clauses.
Compare across platforms →The 'reasonable measures' standard is a minimum legal threshold, not a guarantee; it does not specify encryption standards, access controls, penetration testing, or incident response times, leaving users unable to assess the actual security posture protecting their data.
REGULATORY FRAMEWORK: 'Reasonable security' is the minimum standard under FTC Act Section 5 (FTC data security enforcement program), California Civil Code §1798.81.5 (CCPA/CPRA reasonable security requirement), and the New York SHIELD Act (General Business Law §899-bb). The FTC's 2022 updated Safeguards Rule (16 CFR Part 314) and its commercial surveillance enforcement signals establish that vague security language invites scrutiny. NIST Cybersecurity Framework and ISO 27001 represent industry standards against which 'reasonable' is measured.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.