Lyft collects data about every ride you take, your location, your ratings, and comments — and how that data is used and shared is governed by the separate Privacy Policy, which is incorporated by reference.
Every Lyft ride generates location, behavioral, and personal data that Lyft collects and may share with third parties — the full scope of these practices requires reviewing Lyft's Privacy Policy separately, which is incorporated into these Terms by reference.
Cross-platform context
See how other platforms handle Data Collection and Location Tracking and similar clauses.
Compare across platforms →Ride data and persistent location tracking create detailed behavioral profiles; incorporating the Privacy Policy by reference means users must review a separate document to understand the full scope of data practices they are agreeing to.
REGULATORY FRAMEWORK: Data collection practices engage CCPA/CPRA (Cal. Civ. Code §1798.100–§1798.199) providing California residents rights to access, delete, correct, and opt out of sale/sharing of personal information, with enforcement by the California Privacy Protection Agency (CPPA) and California AG. Location data collection additionally implicates the Electronic Communications Privacy Act (ECPA, 18 U.S.C. §2511), state location privacy laws (e.g., Washington My Health MY Data Act for health-adjacent inferences from location data), and the FTC Act Section 5 for deceptive data practices. Ride data may constitute sensitive personal information under CPRA §1798.121.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.