My intention here is not to go into details, which would not be appropriate for me as an engineer that doesn’t work on those aspects. I am only saying we care a lot about this.
There are so many alternatives to Uber that are better, safer, and even cheaper that there will never be a need to use Uber and they will never get any trust. The people up-top there have been so thoroughly evil for so long and the damage they have done so great that I have no interest trusting them ever again.
Edit: You downvoters have downvoted me so much I'm no longer allowed to reply or otherwise talk on HN. Goodbye.
There was a time when there was a lot of animosity towards Microsoft, but over the years, younger people that had not been exposed to the drama grew up with a more neutral stance, and many many years of not-really-dramatic developments means that nowadays, people only really think of Microsoft as the company behind MS Office, XBox, etc and not so much about what its ethics framework looks like. Obviously you can still see people referring to it as M$ and similar and making fun on windows users, but it certainly isn't _common_ for average people to outright _hate_ Microsoft on ethical grounds.
Uber, Microsoft, Enron, Blackwater, Comcast, Oracle, all get plenty of hate, even from non techies.
I don't care if they have "strong internal data access controls". They should have had that Day 1, they should never have lied or cheated and they certainly should not ever expect anyone to trust them about anything ever again.
First, I doubt that it's true that they have strong controls. I don't trust organizations that have such a long, clear and bragging history of lying.
Second, that sounds like the Titanic being unsinkable. As if I'm going to trust Uber with personal health data - they are the first group I'd suspect to try to sell that data under the table, the first group I'd expect to abuse the power, and also the first group I'd expect to suffer internal leaks or external hacks.
No way I would trust this given the very recent and abhorrent behaviour of the executives at the company.
Edit: Also this,
> and any user data access need a ticket and a justification before accessing
is not secure. Sounds to me like any user can make a ticket and create any justification they like. This is like the NSA saying "any user of our PRISM system is logged and watched" - but what happens when millions of tickets are going through? Is each one actually being carefully inspected for abuse? If Uber executives are in charge of this decision then no way do I trust it.