Skip to main content

DoorDash sues New York City over law that requires it to share customer data with restaurants

DoorDash sues New York City over law that requires it to share customer data with restaurants


The delivery platform says the law raises customer privacy concerns

Share this story

DoorDash is suing New York City (again)
DoorDash is suing New York City (again)
Illustration by Alex Castro / The Verge

Food delivery company DoorDash has filed yet another lawsuit against New York City, calling a new law requiring delivery companies to share customer data with restaurants “a shocking and invasive intrusion of consumers’ privacy.”

Under the law approved in July, third-party food delivery services in the city would have to share customers’ names, phone numbers, emails, and delivery addresses with a restaurant that fulfills a DoorDash order, unless the customer opts out. In its complaint, DoorDash argues that customers entrust DoorDash with sensitive data, “that they would not entrust to small businesses that do not have similar robust data safety and security protocol.”

The company added that in-person diners don’t typically expect to disclose sensitive personal information to restaurants. “Moreover, the Ordinance’s presumption that every customer consents to sharing their personal data—unless they specifically opt out on a per-order basis—flies in the face of prevailing privacy best practices,” the lawsuit states. And there are no guarantees that restaurants would be able to store customer data in a way that both complies with privacy laws and prevents unauthorized access, DoorDash argues.

New York City councilor Keith Powers, introduced the legislation earlier this year. “After such a devastating year for our city’s restaurant industry, this precedent-setting law gives much needed relief to eateries to have better access to customer data and provides strong privacy protections,” Powers wrote in an email to The Verge. “Restaurants are the lifeblood of New York’s economy and culture, and I’m proud that the City Council has stood by our local establishments and New York diners. I encourage DoorDash to drop this lawsuit immediately.” 

The Electronic Frontier Foundation (EFF) wrote in a July letter to New York City Council that it “sympathize[d] with the goal to set a more level playing field for all businesses particularly after the year we have all faced,” but that it opposed the measure: “privacy should be the default of any transaction, and consumers should be asked to opt-in to sharing of their information every time it could be transferred to a new entity.”

In addition, the EFF said, the ordinance “sets up a ripe target for hackers and data thieves who want to exploit [the customers’] information.

Restaurants that relied on deliveries to stay open during the pandemic last year have tangled with online delivery platforms like DoorDash over some of their business practices. A pizzeria owner who bought his own inventory from DoorDash at a profit last year highlighted how the delivery companies seemed to be willing to lose money on deliveries to add more restaurants to their ecosystems. DoorDash rival Grubhub has been caught making websites that impersonated restaurants and listing restaurants on its platform without their knowledge or permission.

Last week, DoorDash, Grubhub, and Uber Eats filed suit against New York City over another new law that caps the amount of fees the delivery companies can collect from restaurants. The city put a temporary cap on delivery fees last June restricting the delivery platform to a maximum fee of 23 percent per order, which breaks down as 15 percent for delivery, 5 percent for having the restaurant listed on its app, and 3 percent for credit card processing fees. The platforms have been accused of adding other unclear fees on top of their delivery fees, however.

In the lawsuit it filed Wednesday, DoorDash is seeking an injunction against enforcing the new customer data rule, unspecified monetary damages, and a jury trial. The law is currently slated to take effect in December, barring any court action.

Update September 15th 1:41PM ET: Added statement from Keith Powers.

Today’s Storystream

Feed refreshed An hour ago The tablet didn’t call that play by itself

Emma RothAn hour ago
Missing classic Mario?

One fan, who goes by the name Metroid Mike 64 on Twitter, just built a full-on 2D Mario game inside Super Mario Maker 2 complete with 40 levels and eight worlds.

Looking at the gameplay shared on Twitter is enough to make me want to break out my SNES, or at least buy Super Mario Maker 2 so I can play this epic retro revamp.

External Link
Russell BrandomAn hour ago
The US might still force TikTok into a data security deal with Oracle.

The New York Times says the White House is still working on TikTok’s Trump-era data security deal, which has been in a weird limbo for nearly two years now. The terms are basically the same: Oracle plays babysitter but the app doesn’t get banned. Maybe it will happen now, though?

Richard LawlerTwo hours ago
Don’t miss this dive into Guillermo del Toro’s stop-motion Pinocchio flick.

Andrew Webster and Charles Pulliam-Moore covered Netflix’s Tudum reveals (yes, it’s going to keep using that brand name) over the weekend as the streamer showed off things that haven’t been canceled yet.

Beyond The Way of the Househusband season two news and timing information about two The Witcher projects, you should make time for this incredible behind-the-scenes video showing the process of making Pinocchio.

Asian America learns how to hit back

The desperate, confused, righteous campaign to stop Asian hate

Esther Wang12:00 PM UTC
External Link
Russell Brandom4:29 PM UTC
Edward Snowden has been granted Russian citizenship.

The NSA whistleblower has been living in Russia for the 9 years — first as a refugee, then on a series of temporary residency permits. He applied for Russian citizenship in November 2020, but has said he won’t renounce his status as a U.S. citizen.

External Link
Emma Roth4:13 PM UTC
Netflix’s gaming bet gets even bigger.

Even though fewer than one percent of Netflix subscribers have tried its mobile games, Netflix just opened up another studio in Finland after acquiring the Helsinki-based Next Games earlier this year.

The former vice president of Zynga Games, Marko Lastikka, will serve as the studio director. His track record includes working on SimCity BuildIt for EA and FarmVille 3.

External Link
Andrew J. Hawkins3:37 PM UTC
Vietnam’s EV aspirant is giving big Potemkin village vibes

Idle equipment, absent workers, deserted villages, an empty swimming pool. VinFast is Vietnam’s answer to Tesla, with the goal of making 1 million EVs in the next 5-6 years to sell to customers US, Canada and Europe. With these lofty goals, the company invited a bunch of social media influencers, as well as some auto journalists, on a “a four-day, multicity extravaganza” that seemed more weird than convincing, according to Bloomberg.

James Vincent3:17 PM UTC
Today, 39 years ago, the world didn’t end.

And it’s thanks to one man: Stanislav Petrov, a USSR military officer who, on September 26th, 1983, took the decision not to launch a retaliatory nuclear attack against the US. Petrov correctly guessed that satellite readings showing inbound nukes were faulty, and so likely saved the world from nuclear war. As journalist Tom Chivers put it on Twitter, “Happy Stanislav Petrov Day to those who celebrate!” Read more about Petrov’s life here.

Soviet Colonel who prevented 1983 nuclear response
Photo by Scott Peterson/Getty Images
The Verge
James Vincent3:03 PM UTC
Deepfakes were made for Disney.

You might have seen the news this weekend that the voice of James Earl Jones is being cloned using AI so his performance as Darth Vader in Star Wars can live on forever.

Reading the story, it struck me how perfect deepfakes are for Disney — a company that profits from original characters, fans' nostalgia, and an uncanny ability to twist copyright law to its liking. And now, with deepfakes, Disney’s most iconic performances will live on forever, ensuring the magic never dies.

External Link
Elizabeth Lopatto2:41 PM UTC
Hurricane Fiona ratcheted up tensions about crypto bros in Puerto Rico.

“An official emergency has been declared, which means in the tax program, your physical presence time is suspended,” a crypto investor posted on TikTok. “So I am headed out of the island.” Perhaps predictably, locals are furious.

The Verge
Richard Lawler2:09 PM UTC
Teen hacking suspect linked to GTA 6 leak and Uber security breach charged in London.

City of London police tweeted Saturday that the teenager arrested on suspicion of hacking has been charged with “two counts of breach of bail conditions and two counts of computer misuse.”

They haven’t confirmed any connection with the GTA 6 leak or Uber hack, but the details line up with those incidents, as well as a suspect arrested this spring for the Lapsus$ breaches.

The Verge
Richard Lawler1:00 PM UTC
Green light.

Good morning to everyone, except for the intern or whoever prevented us from seeing how Microsoft’s Surface held up to yet another violent NFL incident.

Today’s big event is the crash of a NASA spaceship this evening — on purpose. Mary Beth Griggs can explain.

David Pierce12:54 PM UTC
Thousands and thousands of reasons people love Android.

“Android fans, what are the primary reasons why you will never ever switch to an iPhone?” That question led to almost 30,000 comments so far, and was for a while the most popular thing on Reddit. It’s a totally fascinating peek into the platform wars, and I’ve spent way too much time reading through it. I also laughed hard at “I can turn my text bubbles to any color I like.”