There is a difference between collecting usage data of their customers and also requiring the user to provide their name address etc..

Of course with enough transportation usage data (+ maybe additional external data) the identity can be reconstructed in a lot of cases, but the same entity already collecting PII does indeed sound problematic.