A robotaxi is a sensor platform you sit inside, and the cabin is part of it. Before your next ride you can establish what is recorded, who it may be passed to, and which controls you actually hold — rather than finding out afterwards.
Gather the documents and access you need first
This is a paperwork exercise before it is a technology one. You need three things: the operator’s terms of service, its privacy policy, and an account you can log into on a phone or desktop browser. All three are usually published on the company’s website and reachable from the app, though the passenger-facing summary in the app is rarely the full document.
It also helps to know which jurisdiction you are riding in. Residents of California, several other US states and the European Union have statutory rights to ask a company what personal data it holds about them and to request deletion, and those rights are what turn a vague privacy concern into a request the company must answer. If you are riding as a visitor, your rights may be weaker than a local’s.
Finally, set your expectations. The Verge reports that in early September a robotaxi operator said it had detected what it described as a violation of its terms of service involving a firearm, stopped the vehicle and contacted emergency services, and that police then arrested the two teenage passengers — an account the outlet attributes to the Los Angeles Times. The mechanism by which the detection happened has not been publicly detailed, and you should not assume you know it.
Read the terms of service for the passenger conduct clause
Start with the terms rather than the privacy policy, because the terms define the behaviour that can trigger a response. Look for the section listing prohibited items and conduct: weapons, smoking, open containers, damage to the vehicle, unaccompanied minors, and the transport of other passengers not on the booking.
Then look for what the operator says it may do about a violation. The clauses that matter are the ones allowing the company to end a trip early, stop the vehicle, suspend an account, or contact the authorities. A rule you break is one thing; a rule the company has reserved the right to act on unilaterally, mid-journey, is another, and that is the combination worth noting.
Map the sensors inside and outside the cabin
Work out what hardware is present before you reason about policy. Externally, driverless vehicles carry cameras covering all sides, plus lidar and radar, and that footage records the street around you continuously while the vehicle is in service.
Internally, check whether the vehicle has cabin cameras and microphones, and what the operator says they are for. Common stated purposes include identifying lost property, assessing cleanliness and damage, verifying that a rider boarded, and supporting the remote assistance staff who can speak to passengers during a trip. Two-way audio with a remote agent is a normal feature of these services, not an anomaly.
What you generally cannot determine from the passenger seat is whether any of that recording is continuous, triggered by events, retained or discarded, or processed automatically. If the published documents do not say, treat it as unknown rather than guessing.
Read the law enforcement section of the privacy policy
Every substantial privacy policy has a paragraph on disclosure to third parties, and a sub-clause on legal process. Read it for three things.
First, the trigger: does the company say it discloses data only on receipt of a warrant, subpoena or court order, or does it also reserve a discretionary route for emergencies and threats to safety? Second, notification: does it commit to telling the affected user that their data was requested, and does it accept delays where a court has imposed a gag order? Third, scope: is disclosure limited to trip records and account details, or does it extend to video and audio.
Then check whether the operator publishes a transparency report covering government data requests. Some technology companies do and some do not; whether any given robotaxi operator does is something you should verify on its site rather than assume either way.
Work through the privacy settings in the app
Open your account settings and go through every toggle rather than the ones on the first screen. The controls typically worth finding are those governing marketing communications, sharing with advertising partners, sale or sharing of personal information under state privacy laws, use of your data for product improvement, and saved addresses.
Be realistic about the boundary here. Settings usually control secondary uses — advertising, analytics, personalisation — and almost never control safety-related recording, which the company treats as necessary to operating the service. Turning off everything available to you does not make the cabin unmonitored.
Submit a data access request to see what is held
The most direct way to learn what an operator holds on you is to ask it. Look for a privacy request form on the website, or a privacy contact address in the policy. Submit an access request naming yourself, your account and the period you care about, and ask specifically whether audio or video associated with your trips is included.
Note what comes back and what does not. An access response that returns trip times, pickup points and payment records but omits cabin media is itself informative, and you can ask the company to confirm in writing whether such media exists and how long it is kept. If you want the data gone, follow up with a deletion request, understanding that operators normally retain some records for legal, safety and accounting reasons regardless.
Avoid the mistakes people actually make
The most common error is reading the privacy policy and not the terms of service. The policy explains data handling; the terms explain what the company may do to you mid-ride. The incident reported by the Verge turned on a terms-of-service violation, not on a data question.
The second is assuming the cabin is private because there is no driver. Removing the human removes a witness, not the monitoring — the remote support function replaces the driver’s eyes and ears, and it is not physically in the seat in front of you.
The third is treating the vehicle’s external cameras as irrelevant to you. They record other people, other vehicles and the kerbside, and that footage can be sought in investigations that have nothing to do with your trip.
The fourth is believing that deleting the app deletes the data. Account deletion and data deletion are separate processes with separate retention rules, and only the second is the one you want.
The fifth is relying on comparisons with traditional ride-hailing. Dashcams in human-driven cars are frequently owned by the driver, not the platform, which produces a very different chain of custody for the footage.
Recognise when this approach will not help you
This guide is about informed use, and it has limits. If your concern is that a specific category of your movements should not be recorded at all, no configuration of a commercial robotaxi account achieves that; the answer is a different mode of transport.
It also will not help if you need a legal outcome. Understanding a disclosure clause is not the same as challenging a disclosure, and if you have been contacted by law enforcement over a trip, the appropriate step is to consult a lawyer rather than to reread the terms.
Nor is it useful as a compliance strategy. Nothing here is a method for carrying prohibited items undetected, and attempting to defeat monitoring will breach the terms whether or not it works.
Finally, if you are evaluating these services at a policy level — as a regulator, an employer setting travel rules, or a journalist — individual settings are the wrong unit of analysis. The relevant questions are retention periods, disclosure standards and audit mechanisms, and those are answered by the company’s published commitments, not by your account page.
Frequently asked questions
Do robotaxis record audio inside the car?
Operators generally build two-way audio into the cabin so riders can speak to remote support staff, which means a microphone exists. Whether it records continuously, records only during a support call, or simply transmits without storing is determined by the individual company’s privacy policy. Read that document for your specific operator, and if it does not state the answer, ask the company directly through its privacy contact rather than assuming.
Can a robotaxi company give my ride footage to the police?
Privacy policies typically permit disclosure of user data in response to legal process such as a warrant, subpoena or court order, and many also reserve a discretionary route for emergencies or threats to safety. The Verge, citing the Los Angeles Times, reports one case in which an operator itself contacted emergency services after identifying a terms-of-service violation. Check your operator’s specific disclosure clause and whether it commits to notifying users.
How do I find out what data a robotaxi company holds about me?
Submit a data access request through the operator’s privacy request form or the contact address published in its privacy policy. If you live in California, another US state with a comprehensive privacy law, or the European Union, the company is generally obliged to respond within a set period. Ask explicitly whether the response covers cabin audio and video, because trip and payment records alone may not.
Does turning off app permissions stop the car recording me?
No. App permissions govern what the software on your phone can access — location, notifications, contacts — and privacy settings in your account usually govern secondary uses such as advertising and analytics. Neither controls the vehicle’s own cameras and sensors, which the operator treats as integral to running the service safely. Those recordings are governed by the operator’s retention policy, not by anything you can switch off.
Sources and further reading
- The Verge, transportation coverage on robotaxi surveillance and passenger privacy, which reported the September incident referenced here.
- The Los Angeles Times, cited by the Verge as the source of the account of the stopped vehicle and subsequent arrest.
- Published terms of service and privacy policies of autonomous vehicle operators, which are the primary documents for any individual rider.
- State and national data protection authorities, including the California Privacy Protection Agency and European data protection regulators, for the scope of access and deletion rights.
Surfaced from the rss:verge signal “robotaxi passenger surveillance”. AI-assisted draft, editorially reviewed.
