[troupo]

Could be simple negligence on Uber's part.

Personal anecdote:

Many years ago I was involved with a US organization, and then happily forgot about it. Almost 15 years later they started spamming me with emails coming from their head office in Washington.

I asked them to stop. They didn't. I threatened legal action under GDPR and requested deletion, also under GDPR. They said they complied. A year later they started spamming me again. From the same address.

That's how I knew that they never deleted my info and kept it in the US.

[einpoklum]

> Could be simple negligence on Uber's part.

The didn't slip, fall, and drop some USB flash drives into the hands of a US data processor...

I doubt it is any sort of negligence, but if it is - it's not "simple".

[lazide]

Indeed. It’s about as plausible as the ‘I tripped and fell’ excuse for cheating.

[troupo]

negligence: failure to exercise the care that a reasonably prudent person would exercise in like circumstances.

Most companies are negligent. Many of those are also deliberately negligent

[amarcheschi]

Have you followed with a notification to your privacy authority?

[troupo]

In this case it really wasn't worth it, but I've done it in other cases

[raverbashing]

Uber is very aggressive with notification span

Even worse when you move between countries and suddenly "Uber Country X" uses your account of "Country Y" to spam notify you about promotions in X. It's weird in a bad way

[amarcheschi]

I've visited us not long ago and took a uber (i had uber on my phone since 2019, when i used it before). They started aggressively spamming notifications to my phone and uber eats this and uber that. in the end, i was still going to use the service that was the cheapest