Gig Economy, VPN & Subs · Gig Economy · Structural / no discrete incident
TaskRabbit (IKEA)
Headline
The 2018 incident remains the useful precedent because of the asymmetry it exposes: a gig platform holds both customer data and worker data, and the worker side is far more extensive - background check results…
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
The 2018 incident remains the useful precedent because of the asymmetry it exposes: a gig platform holds both customer data and worker data, and the worker side is far more extensive - background check results, identity documents, bank details, home address, and a work history that is also a location history. Workers cannot decline any of it and still earn, and they have no bargaining power over the terms. Across this tracker, gig platforms are the clearest case of the person generating the most sensitive data having the least ability to negotiate over it.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass — standard binding arbitration + class action waiver expected.
Data sharing
HISTORICAL CONFIRMED BREACH (2018, still relevant precedent): a 'cybersecurity incident' forced TaskRabbit (then newly acquired by IKEA) to take its ENTIRE website and app OFFLINE — an unauthorized user gained access to systems affecting users and Taskers (the notice filed with the Iowa AG states no count); one version of the notice (reportedly the one sent to TASKERS) listed names, usernames, passwords, birthdates, SOCIAL SECURITY NUMBERS, bank account numbers, and truncated payment card info — a notably broader and more sensitive data set than what was exposed for CLIENTS (names, usernames, passwords, birthdates, truncated card info only), reflecting how gig-worker accounts often require MORE sensitive financial verification data (for tax/payment purposes) than the customers who hire them.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy taskrabbit.com/privacy | Not fetched yet | NO (HTML only) |
| Terms of service taskrabbit.com/terms | Not fetched yet | NO (HTML only) |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.