The DPF is the current post-Schrems II mechanism for EU-US data transfers, but its legal adequacy has been challenged and could be invalidated, which would affect the lawfulness of TaskRabbit's data transfers.
TaskRabbit collects a wide range of sensitive personal data including government-issued ID documents, social security or tax ID numbers, criminal background check results, location data, and financial information — and shares this data with third-party advertisers and business partners. The policy's broad unilateral disclosure clause allows TaskRabbit to share your information with third parties at its sole discretion where it believes there has been possible interference with user rights, a provision that goes beyond standard legal cooperation. You can opt out of the advertising-related sale of your personal information at https://optout.privacyrights.info/?c=1, and EU/UK/EEA residents can withdraw consent or object to legitimate-interest processing by submitting a Consumer Rights Request at https://support.taskrabbit.com/hc/en-us/requests/new?ticket_form_id=360001457171.