Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The notice states that Uber collects precise GPS location data from drivers continuously while the app is in the foreground or background, covering the period from trip request through trip completion and a period afterward, and in some markets may collect location data between trips.
This analysis describes what Uber's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Continuous background location collection constitutes processing of precise geolocation data, classified as sensitive personal information under CPRA and subject to heightened protections under GDPR and multiple other frameworks; collection outside active trip periods extends the scope of surveillance beyond what may be operationally necessary for service delivery.
This provision establishes that drivers' precise GPS location is collected continuously while the app is active in any state, including background operation, and may extend to periods between trips in certain markets; drivers who restrict background location permissions on their devices may affect platform functionality.
How other platforms handle this
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
When you are asked to provide information, you may decline to do so; but if you choose not to provide information that is necessary to provide some of our Services, you may not be able to use those Services.
Monitoring
Uber has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Uber collects precise or approximate location data from drivers' and delivery people's mobile devices when the Uber app is running in the foreground (app open and on-screen) or background (app open but not on-screen) of their device. Uber collects this data from the time a driver or delivery person requests a trip until it is finished, and may also collect data during a short period after a trip is finished.Excerpt from Uber's Privacy Notice (Drivers and Delivery People)
1) REGULATORY LANDSCAPE: Precise geolocation data is sensitive personal information under CPRA (requiring opt-out rights and data minimization), special category-adjacent data under GDPR requiring legitimate interests balancing tests or other lawful basis, and subject to FTC guidance on location data practices. The FTC has taken enforcement action against companies engaging in persistent location tracking without adequate notice or consent. State AGs in California, Illinois, and other states have active consumer protection authority over location data practices. 2) GOVERNANCE EXPOSURE: High. Background and between-trip location collection extends data collection beyond the immediate service context, which may face challenge under GDPR data minimization principles (Article 5(1)(c)) and CPRA proportionality expectations. The notice asserts legitimate interests as a basis for some location processing but the specific balancing test documentation required under GDPR is not reproduced in the public notice. 3) JURISDICTION FLAGS: California (CPRA precise geolocation as sensitive personal information, opt-out rights), EU/EEA (GDPR data minimization, purpose limitation, and legitimate interests documentation), Illinois and other states with location data restrictions. Markets where between-trip collection occurs should be specifically identified for targeted regulatory review. 4) CONTRACT AND VENDOR IMPLICATIONS: Third-party analytics, mapping, and insurance vendors receiving location data feeds should be assessed for appropriate data processing agreements. Location data shared with insurance partners for telematics programs should be evaluated against applicable insurance data regulations in each state. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should verify that location data collection scope is limited to what is necessary for each stated purpose, that CPRA-compliant consent and opt-out mechanisms are in place for California drivers, and that GDPR legitimate interests assessments are documented and available for supervisory authority review. Privacy impact assessments (PIAs/DPIAs) may be warranted for between-trip location collection given its extended scope.
Regulatory citations, enforcement risk, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
Continuous background location collection constitutes processing of precise geolocation data, classified as sensitive personal information under CPRA and subject to heightened protections under GDPR and multiple other frameworks; collection outside active trip periods extends the scope of surveillance beyond what may be operationally necessary for service delivery.
This provision establishes that drivers' precise GPS location is collected continuously while the app is active in any state, including background operation, and may extend to periods between trips in certain markets; drivers who restrict background location permissions on their devices may affect platform functionality.
ConductAtlas has identified this type of provision across 295 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Uber.