Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that Lyft collects precise GPS and WiFi location data from Riders throughout app use including background operation during active rides, and from Drivers during app use, after exiting driver mode for incident detection, and until any reported or detected incident is resolved. Scooters and e-bikes are tracked at all times.
This analysis describes what Lyft's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes continuous precise location collection tied to platform activity, with Driver-side collection extending beyond active sessions in connection with incident detection. The post-session location retention period for Drivers is described as lasting until a reported or detected incident is no longer active, a duration that is not quantified in the document.
Interpretive note: The duration of post-session Driver location collection is described as lasting until an incident is no longer active, but the policy does not quantify a maximum period, creating ambiguity about the practical scope of collection.
Under these terms, Riders' precise location is collected from ride request through ride completion including during background app operation, while Drivers' precise location is collected during active sessions and for an unspecified period thereafter tied to incident resolution. The policy authorizes Lyft to track scooter and e-bike location at all times regardless of active use.
Cross-platform context
See how other platforms handle Precise Location Data Collection and similar clauses.
Compare across platforms →Monitoring
Lyft has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Riders: We collect your device's precise location when you open and use the Lyft app, including while the app is running in the background from the time you request a ride until it ends. You may otherwise choose to allow Lyft to collect your device's precise location if you explicitly grant permission to enable certain products or features. Lyft also tracks the precise location of scooters and e-bikes at all times. Drivers: We collect your device's precise location when you open and use the app, including while the app is running in the background. We also collect precise location for a limited time after you exit driver mode in order to detect ride incidents, and continue collecting it until a reported or detected incident is no longer active.Excerpt from Lyft's Privacy Policy
1) REGULATORY LANDSCAPE: Continuous precise location collection engages the California Consumer Privacy Act's sensitive data provisions, as well as similar sensitive data categories under Colorado, Connecticut, Virginia, and other state privacy statutes that classify precise geolocation data as sensitive personal information requiring specific disclosure and, in some jurisdictions, opt-in consent. The FTC Act's framework for unfair or deceptive practices is also relevant where location data is shared with third parties. 2) GOVERNANCE EXPOSURE: Medium. The policy discloses continuous background location collection for Riders and post-session location collection for Drivers, with the Driver post-session period tied to incident resolution and not quantified. This creates data minimization and retention questions under state privacy frameworks that require collection to be limited to what is reasonably necessary for the stated purpose. 3) JURISDICTION FLAGS: California, Colorado, Connecticut, and Virginia impose heightened requirements on precise geolocation data as a sensitive category. Illinois users should be evaluated for any biometric or location-adjacent provisions. EU and UK users are directed to separate disclosures and may have additional rights under UK data protection law. 4) CONTRACT AND VENDOR IMPLICATIONS: Location data shared with third-party service providers for insurance, fraud detection, and advertising purposes requires vendor assessment to confirm data processing agreements address sensitive geolocation handling. The undefined duration of post-incident Driver location retention may require clarification in vendor data processing terms. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should evaluate whether the precise location collection disclosure satisfies opt-in consent requirements in jurisdictions that classify geolocation as sensitive, assess whether the post-session Driver collection period is adequately scoped under data minimization principles, and confirm that third-party sharing of location data for advertising complies with applicable opt-out or opt-in requirements.
This provision authorizes continuous precise location collection tied to platform activity, with Driver-side collection extending beyond active sessions in connection with incident detection. The post-session location retention period for Drivers is described as lasting until a reported or detected incident is no longer active, a duration that is not quantified in the document.
Under these terms, Riders' precise location is collected from ride request through ride completion including during background app operation, while Drivers' precise location is collected during active sessions and for an unspecified period thereafter tied to incident resolution. The policy authorizes Lyft to track scooter and e-bike location at all times regardless of active use.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Lyft.