Lyft collects your exact GPS location while you use the app, and may also track your location even when the app is running in the background if you have granted that permission.
This analysis describes what Lyft's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Continuous and background location tracking creates a detailed record of your physical movements, which the policy permits sharing with advertising and business partners beyond the core purpose of providing a ride.
Your precise GPS location may be collected continuously and even when you are not actively using the app, and this location data may be shared with third-party advertising partners, creating a detailed movement profile linked to your identity.
How other platforms handle this
Uber collects precise or approximate location data from riders' and order recipients' mobile devices when the Uber app is running in the foreground (app open and on-screen) or background (app open but not on-screen) of their device. Uber collects this data from the time a ride or order is requested ...
Geolocation Information, if you have consented by enabling location access, we may receive and store your precise location information, including when our apps are running in the foreground (our app is open and on screen) or background (our app is open, not on screen) of your device. You may use our...
We may collect the precise geographic location of your device when you use our services. We collect this information with your consent where required by law. You can withdraw your consent at any time by adjusting your device settings to disable location sharing.
Monitoring
Lyft has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"We collect precise or approximate location data, including the GPS location of your device, when you use our app. We also may collect location data from your device when the app is running in the background if you permit us to do so.— Excerpt from Lyft's Lyft Privacy Policy
REGULATORY LANDSCAPE: Precise geolocation constitutes sensitive personal information under CPRA, requiring businesses to offer consumers the right to limit its use and disclosure. GDPR Article 9 and related recitals treat precise location data as warranting heightened protection, and processing for advertising purposes may require explicit consent rather than legitimate interest as a legal basis. The FTC has issued guidance treating precise location data as sensitive regardless of general consent to location services. GOVERNANCE EXPOSURE: High. The policy asserts the right to collect background location data and share precise location with advertising partners. This creates material exposure under CPRA's sensitive personal information framework and may require evaluation of whether current consent mechanisms and data sharing agreements satisfy the legal requirements for each jurisdiction in which Lyft operates. JURISDICTION FLAGS: California (CPRA sensitive data limitations), EU/EEA (GDPR consent and legitimate interest balancing for location-based advertising), Virginia (VCDPA sensitive data provisions), Colorado (CPA). Background location collection may be particularly scrutinized in jurisdictions where regulators have taken enforcement action against app-based location tracking. CONTRACT AND VENDOR IMPLICATIONS: Data processing agreements with advertising partners receiving precise location data should be reviewed to confirm they include appropriate data use limitations, retention restrictions, and are consistent with Lyft's stated privacy policy disclosures. Procurement teams should assess whether advertising partners are classified as processors or independent controllers, as this affects liability allocation. COMPLIANCE CONSIDERATIONS: Compliance teams should audit whether the opt-out mechanism for limiting use of sensitive personal information (location) is prominently disclosed and technically functional. Consent flows for background location permissions on iOS and Android should be reviewed to ensure they accurately describe the advertising use case. Data mapping should confirm which advertising partners receive location data and under what contractual terms.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Continuous and background location tracking creates a detailed record of your physical movements, which the policy permits sharing with advertising and business partners beyond the core purpose of providing a ride.
Your precise GPS location may be collected continuously and even when you are not actively using the app, and this location data may be shared with third-party advertising partners, creating a detailed movement profile linked to your identity.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Lyft.