Security

Uber explains why it looks like its app is still tracking your location, long after drop-off

Comment

Image Credits:

Uber responded today to reports that its app continues to check users’ locations even when they hadn’t used the ride-hailing service for days or weeks. The company explained that the issue is being caused by the iOS operating system itself, not direct tracking by its app.

Many users had realized that Uber’s app appeared to have recently checked their location, according to their iPhone Settings.

But Uber says this is behavior that’s being triggered by the iOS Maps extension that Apple opened in September. It’s not due to a bug in the Uber app nor is it a consequence of the recent location services update, the company told us.

The reason this issue was worrisome is because Uber announced last month that it would begin background collection of user data, but only for five minutes after drop-off. The data would help it improve drop-off and pick-up point accuracy in the future, Uber had said.

Some users, of course, were concerned the company may overstep here, or felt generally uncomfortable about sharing this data.

That’s not surprising, given that Uber has had several high-profile slip-ups regarding user privacy in the past, including poor security practices around private data, reports of Uber spying on reporters’ trips, misuse of an internal tracking tool dubbed “God View,” reports that internal employees stalked ex-girlfriends and celebs, among other things.

But, as John Gruber of DaringFireball.net noted in a recent post, an iOS feature would allow users to check to see if Uber kept its word about limiting location tracking to only five minutes after the drop-off.

He explained that, in iOS’s Settings, you’re able to track which apps are accessing your location.

Under “Settings → Privacy → Location Services,” an indicator appears next to apps that have recently checked your location. The indicator is purple if that check was recent, or gray if it was in the last 24 hours. He noted also that he had been checking this for his Uber app, but didn’t see any signs of misuse.

As it turns out, that wasn’t true for everyone.

In a second post, Gruber says many readers sent screenshots of the Uber app still checking their location, even though it had been days or even weeks since they last used the car service.

Some TechCrunch reporters here saw the problem on their devices, too.

https://twitter.com/johnnynoble/status/811483448082763776

Obviously, this seemed to be concerning behavior on Uber’s part, as it would appear to indicate the company was not true to its word.

However, Uber says the location tracking is not intentional behavior on the part of its app.

Uber investigated the issue today, at our request, and found the issue is related to the iOS Maps extension. This also explains why not everyone was seeing the problem.

Uber’s map extension feature was made available in September, and is based on Apple’s protocol for Map extensions. Other map extensions from Uber competitors would work the same way, then.

According to an Uber spokesperson: “For people who choose to integrate ride sharing apps with iOS Maps, location data must be shared in order for you to request a ride inside the Maps app. Map extensions are disabled by default and you can choose to turn them on in your iOS settings,” they said.

In other words, it’s not a bug, it’s feature. And it’s a feature of iOS.

Unfortunately, the way iOS is designed will make it difficult for users who like to keep an eye on their apps for privacy’s sake from being able to just glance at their Settings in order to see if those apps are misbehaving.

And Uber isn’t the only third-party app that’s been integrated with Apple Maps: Lyft, OpenTable and Yelp are also available.

Perhaps Apple needs another color-coded indicator in the Location Services Settings to show users if it’s the app that’s accessing your location data, or if it’s the Maps extension that’s causing your otherwise unused app to look as if it’s tracking you. After all, if the feature is designed to give users control over their own private data, we’ll need better tools than those iOS currently provides.

More TechCrunch

Around 550 employees across autonomous vehicle company Motional have been laid off, according to information taken from WARN notice filings and sources at the company.  Earlier this week, TechCrunch reported…

Motional cut about 550 employees, around 40%, in recent restructuring, sources say

The deck included some redacted numbers, but there was still enough data to get a good picture.

Pitch Deck Teardown: Cloudsmith’s $15M Series A deck

The company is describing the event as “a chance to demo some ChatGPT and GPT-4 updates.”

OpenAI’s ChatGPT announcement: What we know so far

Unlike ChatGPT, Claude did not become a new App Store hit.

Anthropic’s Claude sees tepid reception on iOS compared with ChatGPT’s debut

Welcome to Startups Weekly — Haje‘s weekly recap of everything you can’t miss from the world of startups. Sign up here to get it in your inbox every Friday. Look,…

Startups Weekly: Trouble in EV land and Peloton is circling the drain

Scarcely five months after its founding, hard tech startup Layup Parts has landed a $9 million round of financing led by Founders Fund to transform composites manufacturing. Lux Capital and Haystack…

Founders Fund leads financing of composites startup Layup Parts

AI startup Anthropic is changing its policies to allow minors to use its generative AI systems — in certain circumstances, at least.  Announced in a post on the company’s official…

Anthropic now lets kids use its AI tech — within limits

Zeekr’s market hype is noteworthy and may indicate that investors see value in the high-quality, low-price offerings of Chinese automakers.

The buzziest EV IPO of the year is a Chinese automaker

Venture capital has been hit hard by souring macroeconomic conditions over the past few years and it’s not yet clear how the market downturn affected VC fund performance. But recent…

VC fund performance is down sharply — but it may have already hit its lowest point

The person who claims to have 49 million Dell customer records told TechCrunch that he brute-forced an online company portal and scraped customer data, including physical addresses, directly from Dell’s…

Threat actor says he scraped 49M Dell customer addresses before the company found out

The social network has announced an updated version of its app that lets you offer feedback about its algorithmic feed so you can better customize it.

Bluesky now lets you personalize main Discover feed using new controls

Microsoft will launch its own mobile game store in July, the company announced at the Bloomberg Technology Summit on Thursday. Xbox president Sarah Bond shared that the company plans to…

Microsoft is launching its mobile game store in July

Smart ring maker Oura is launching two new features focused on heart health, the company announced on Friday. The first claims to help users get an idea of their cardiovascular…

Oura launches two new heart health features

Keeping up with an industry as fast-moving as AI is a tall order. So until an AI can do it for you, here’s a handy roundup of recent stories in the world…

This Week in AI: OpenAI considers allowing AI porn

Garena is quietly developing new India-themed games even though Free Fire, its biggest title, has still not made a comeback to the country.

Garena is quietly making India-themed games even as Free Fire’s relaunch remains doubtful

The U.S.’ NHTSA has opened a fourth investigation into the Fisker Ocean SUV, spurred by multiple claims of “inadvertent Automatic Emergency Braking.”

Fisker Ocean faces fourth federal safety probe

CoreWeave has formally opened an office in London that will serve as its European headquarters and home to two new data centers.

CoreWeave, a $19B AI compute provider, opens European HQ in London with plans for 2 UK data centers

The Series C funding, which brings its total raise to around $95 million, will go toward mass production of the startup’s inaugural products

AI chip startup DEEPX secures $80M Series C at a $529M valuation 

A dust-up between Evolve Bank & Trust, Mercury and Synapse has led TabaPay to abandon its acquisition plans of troubled banking-as-a-service startup Synapse.

Infighting among fintech players has caused TabaPay to ‘pull out’ from buying bankrupt Synapse

The problem is not the media, but the message.

Apple’s ‘Crush’ ad is disgusting

The Twitter for Android client was “a demo app that Google had created and gave to us,” says Particle co-founder and ex-Twitter employee Sara Beykpour.

Google built some of the first social apps for Android, including Twitter and others

WhatsApp is updating its mobile apps for a fresh and more streamlined look, while also introducing a new “darker dark mode,” the company announced on Thursday. The messaging app says…

WhatsApp’s latest update streamlines navigation and adds a ‘darker dark mode’

Plinky lets you solve the problem of saving and organizing links from anywhere with a focus on simplicity and customization.

Plinky is an app for you to collect and organize links easily

The keynote kicks off at 10 a.m. PT on Tuesday and will offer glimpses into the latest versions of Android, Wear OS and Android TV.

Google I/O 2024: How to watch

For cancer patients, medicines administered in clinical trials can help save or extend lives. But despite thousands of trials in the United States each year, only 3% to 5% of…

Triomics raises $15M Series A to automate cancer clinical trials matching

Welcome back to TechCrunch Mobility — your central hub for news and insights on the future of transportation. Sign up here for free — just click TechCrunch Mobility! Tap, tap.…

Tesla drives Luminar lidar sales and Motional pauses robotaxi plans

The newly announced “Public Content Policy” will now join Reddit’s existing privacy policy and content policy to guide how Reddit’s data is being accessed and used by commercial entities and…

Reddit locks down its public data in new content policy, says use now requires a contract

Eva Ho plans to step away from her position as general partner at Fika Ventures, the Los Angeles-based seed firm she co-founded in 2016. Fika told LPs of Ho’s intention…

Fika Ventures co-founder Eva Ho will step back from the firm after its current fund is deployed

In a post on Werner Vogels’ personal blog, he details Distill, an open-source app he built to transcribe and summarize conference calls.

Amazon’s CTO built a meeting-summarizing app for some reason

Paris-based Mistral AI, a startup working on open source large language models — the building block for generative AI services — has been raising money at a $6 billion valuation,…

Sources: Mistral AI raising at a $6B valuation, SoftBank ‘not in’ but DST is