Uber Eats is a food, grocery, and retail delivery product operated by Uber Technologies, Inc. (NYSE: UBER) and governed by Uber's global "Riders and Order Recipients" privacy notice, which covers guest-checkout delivery customers ("Order Recipients") alongside account holders. That notice discloses collection of precise location and detailed trip/order data, sharing of order-linked data with restaurants/merchants and with advertising intermediaries (Criteo, Google, Rokt, The Trade Desk, TripleLift) for ad targeting, and Apple's App Store privacy label for the Uber Eats app itself confirms cross-app tracking. Ownership is fully traceable through Uber Technologies' SEC filings, which describe Uber Eats as the company's Delivery segment launched over ten years ago. Uber Technologies' track record includes the FTC's 2018 expanded settlement over a concealed 2016 breach of 25 million+ names/emails and 600,000 driver's-license numbers, an order binding the same corporate entity that operates Eats; no Eats-specific breach was identified from primary sources as of this review.
TRACK RECORD
1 ENFORCEMENT ACTION
[2018-04-12]
The FTC's 2018 expanded settlement with Uber Technologies, Inc. — the same corporate entity that operates Uber Eats under the same privacy notice — found the company concealed a November 2016 breach in which intruders downloaded unencrypted files containing more than 25 million names/email addresses, 22 million names/phone numbers, and 600,000 driver's-license numbers of U.S. Uber drivers and riders, and that Uber paid the intruders $100,000 through its bug-bounty program instead of disclosing the breach.
Uber's global privacy notice for Riders and Order Recipients defines an "Order Recipient" as someone who uses guest-checkout features to receive delivery or pickup services without creating or signing into an account, and states that Uber collects detailed trip/order information — including payment amount and method, proof of delivery, and special instructions or allergy/food notes — for orders placed via guest checkout as well as by account holders.
Uber Technologies, Inc.'s FY2025 Annual Report on Form 10-K, filed with the SEC, describes Uber Eats as the company's Delivery app and segment, stating it launched over ten years ago and increases consumer engagement with the broader Uber platform — confirming Uber Eats is not a separately incorporated or opaque entity but a product line of the publicly traded parent.
Apple's App Privacy label for Uber Eats lists "Third-Party Advertising" among the purposes for which data linked to a user's identity — including purchase history, precise and coarse location, contact info, and search history — may be used, corroborating the privacy notice's disclosure of sharing with named ad intermediaries.
Uber's privacy notice for Riders and Order Recipients states that if a user adds a restaurant or merchant loyalty membership number to their account, Uber shares that data with the restaurant or merchant whenever the user places an order with them — a direct, order-triggered disclosure to the Uber Eats merchant side of the marketplace.
The FTC's 2018 expanded settlement with Uber Technologies, Inc. — the same corporate entity that operates Uber Eats under the same privacy notice — found the company concealed a November 2016 breach in which intruders downloaded unencrypted files containing more than 25 million names/email addresses, 22 million names/phone numbers, and 600,000 driver's-license numbers of U.S. Uber drivers and riders, and that Uber paid the intruders $100,000 through its bug-bounty program instead of disclosing the breach.
Apple's App Privacy label for the Uber Eats iOS app, provided by developer Uber Technologies, Inc., discloses that Purchases, Contact Info, Search History, Identifiers, Usage Data, and Other Data may be used to track Uber Eats users across apps and websites owned by other companies.