HACKER Q&A
📣 anon-2020-09

How did Uber app know I was flying today? Info leakage


I just got a pop-up on both my Android and iPhone from the Uber app: "Flying today? Schedule your ride with Uber".

I am indeed flying today, but I don't know how it knew that.

I know that Google reads your gmail to create these kinds of reminders. But I don't know how Uber can.

Here are the allowed permissions on Android:

- Camera, Contacts, Location, Phone, SMS, Storage (microphone off)

Allowed permissions on iPhone:

- Location (while using), Camera, Siri & Spearch, Notifications, Background App Refresh, Cellular Data

How did it know? Siri and Search seems suspicious. Is Siri reading my mail and providing it to the Uber app?

It says "Learn from this app" is on. However I take that to mean that Siri is learning from the Uber app, not the other way around !!!


  👤 brudgers Accepted Answer ✓
It's not your phone permissions. It's the internet.

In the general case, a data broker collects airline information from airline computer systems, hotel information from hotel systems, location information from phone carriers and so on. The data broker sells the information to Uber because that's the data broker's business.

In the simplest case, Uber buys the information from the airline directly.


👤 no-one-yet
Maybe it wasn't clear but if you got this while at the airport or on a route that is associated with the airport then perhaps that information can be inferred from your location.

👤 Jugurtha
I received an email from Careem that starts like this:

>We’d like to be the first to greet you on your return to X!

The model got it very wrong, as in nothing is even close to a situation where I'd be in X.


👤 randyrand
All apps have access to your email address and cross correlate those info together.

Even without email, every app can access your device id and use that to cross correlate together with ad most networks.


👤 olegious
I got the same notification today, not flying anywhere and not near an airport. Coincidence?

👤 mgoetzke
Location access on Android would make that easy would it not ?

👤 Otek
You were at the airport when you got notification?

👤 scott31
You have clicked yes on every permission dialog you have been presented. I wouldn't be surprised if you gave your Gmail password to Uber

👤 ViViDboarder
Did you sign in with Google?