--- title: "Food delivery, ride hailing and gig apps: your rights and how to..." description: "Food and cab apps, drivers and delivery workers: safety, data and complaints. Plain steps, helplines and templates." url: "https://dpdpr.in/rights/food-ride-gig/" canonical: "https://dpdpr.in/rights/food-ride-gig/" site: "dpdpr.in" updated: "2026-11-02" disclaimer: "Independent reference, not legal advice. Not affiliated with the Government of India or MeitY." --- # Food delivery, ride hailing and gig apps: your rights and how to complain Plain-language help for ordinary people. General information, not legal advice. Helplines, portals and screen names were checked against official Government and regulator pages on 1 November 2026. Portals change: if a screen looks different, follow the words on the screen and the official guide linked in each step. ## What data they hold - Your phone number, addresses and live location during a trip or delivery. - Trip and order history and payments. - For workers: ID documents, bank details, ratings and location while working. ## Your rights under current law - Food and grocery delivery apps are e-commerce entities, so the E-Commerce Rules apply: a grievance officer, acknowledgement in 48 hours, resolution in one month. - Under the Motor Vehicle Aggregator Guidelines, 2025, a cab or bike taxi app must appoint a grievance officer and show the officer's name, email and phone in the app and website (clause 9.10). - The same Guidelines say passenger and journey data must be stored as the law requires, including the DPDP Act (clause 14.5). The app must let you share your live location until the trip ends (14.7), and keep the driver's contact visible to you for at least 7 days after the trip (14.11). - Ride apps must run a 24x7 call centre for passenger complaints (clause 14.13). Your State may have its own aggregator rules as well. ## Your DPDP rights once in force Sections 11 to 14 of the DPDP Act (your rights) and the duties of companies in sections 4 to 10 start on **13 May 2027** (G.S.R. 843(E)). Until then, use the sector rules on this page. After that date you can use both. From 13 May 2027 you can ask what personal data they hold about you and who they shared it with (section 11), and ask for correction or erasure (section 12). They must stop using data once you withdraw consent, unless a law requires them to keep it. Workers have the same rights over the ID, bank and location data the platform holds about them. - Access: a summary of your data and who it was shared with ([section 11](https://dpdpr.in/act/section-11/)). - Correction, completion, updating and erasure ([section 12](https://dpdpr.in/act/section-12/)). - Grievance redressal by the company, before going to the Board ([section 13](https://dpdpr.in/act/section-13/)). - Nominate someone to act after your death or incapacity ([section 14](https://dpdpr.in/act/section-14/)). - Withdraw consent, as easily as you gave it ([section 6(4)](https://dpdpr.in/act/section-6/)). ## Common problems - A driver or delivery person keeps calling or messaging you after the trip. - Your number or address shared outside the app. - Fake customer care numbers for refunds. - Workers unsure what location and ID data the app keeps. ## Evidence to keep - Trip or order ID, date and time. - Screenshots of calls or messages after the trip. - Your in-app complaint and its ticket number. - Payment SMS for any money lost. See the full [evidence checklist](https://dpdpr.in/rights/evidence-checklist/). ## How to approach, step by step Go in this order. Start with the company. Move to the next step only when the time limit has passed or the reply is not good enough. If money was lost or you were threatened, go to 1930 or the police first. ### Write to the company's grievance officer Most apps and websites must name a grievance officer. E-commerce sites, ride apps and platforms such as job portals, dating and matrimony apps all have one under the rules that apply to them. **Keep this ready before you start:** - Your account ID, registered mobile or email, and order or booking number. - Screenshots and dates. - What you want: delete my data, stop calls, refund, remove a profile. 1. Open the app or website. Look for **Grievance Officer**, **Contact us** or **Privacy policy**. The officer's name and contact must be shown there. 2. Write a short complaint. Use the template on this page. 3. Attach screenshots. 4. Send it. Save the acknowledgement or ticket number and the date. 5. Wait for the time limit for that kind of company (shown in the time limits on this page). 6. If there is no reply, send one reminder with your ticket number. 7. Then go to the next step on this page. Checked on 1 November 2026 against: [National Consumer Helpline FAQ: Consumer Protection (E-Commerce) Rules, 2020](https://consumerhelpline.gov.in/faq-details.php?fid=E-Commerce), [IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, as amended up to 10 February 2026](https://www.meity.gov.in/documents/act-and-policies/information-technology-intermediary-guidelines-and-digital-media-ethics-code-rules-2021-it-rules-2021-IjM5QjMtQWa). ### National Consumer Helpline, then the Consumer Commission The National Consumer Helpline (NCH) is run by the Department of Consumer Affairs. It forwards your complaint to the company and tracks the reply. If that fails, you can file a case before a Consumer Commission on e-Jagriti. **Keep this ready before you start:** - Bill, invoice, order ID or account number. - Your complaint to the company and its reply, if any. - Screenshots and dates. 1. Call **1915** or **1800114000** (8 AM to 8 PM), or WhatsApp **+91 8800001915**. 2. Or open [consumerhelpline.gov.in](https://consumerhelpline.gov.in/public/) and click **Register Grievance**. You can also use the NCH app or the UMANG app. 3. Describe the problem, the company and what you want. 4. Save the grievance number you are given. 5. Use **Track Your Grievance** to see the company's reply. Use **Upload Documents** to add proof. 6. If the company still does not fix it, you can file a consumer case on [e-Jagriti](https://e-jagriti.gov.in), the official portal for Consumer Commissions. It uses OTP registration, online fees and virtual hearings. 7. File the case within 2 years of the problem. This is the limit in section 69 of the Consumer Protection Act, 2019. Checked on 1 November 2026 against: [National Consumer Helpline (Department of Consumer Affairs)](https://consumerhelpline.gov.in/public/), [e-Jagriti: file a case before a Consumer Commission](https://e-jagriti.gov.in/). ### Report money lost to fraud: call 1930 1930 is the national cyber crime helpline run with the Ministry of Home Affairs. It links your report to banks and wallets so they can try to stop the money. Call as fast as you can. The sooner the report reaches the bank, the better the chance. **Keep this ready before you start:** - Your mobile number. - Name of the bank, wallet or app the money left from. - Account number, wallet ID or UPI ID that was debited. - Transaction ID or 12 digit UTR number for each payment. - Date and amount of each payment. - Card number, if a debit or credit card was used. - Screenshots of the payment and of the chat or SMS. 1. Dial **1930** from any phone. 2. Tell them you want to report a financial cyber fraud. 3. Give each transaction one by one: bank, transaction ID or UTR, date and amount. 4. Write down the acknowledgement number they give you. It also comes by SMS. 5. Save that SMS. Take a screenshot of it. 6. Now file the full complaint on [cybercrime.gov.in](https://cybercrime.gov.in) (steps below). The official cybercrime.gov.in instructions ask you to complete it within 24 hours of the call. 7. Call your bank's official customer care number too, and ask them to block the card, UPI or account. Use the number on your card or passbook. Checked on 1 November 2026 against: [I4C (Ministry of Home Affairs): National Cybercrime Reporting Portal and 1930](https://i4c.mha.gov.in/ncrp.aspx), [National Cyber Crime Reporting Portal: FAQ](https://cybercrime.gov.in/Webform/FAQ.aspx). ### Use your DPDP rights (from 13 May 2027) The rights in sections 11 to 14 of the DPDP Act, and the duties of companies that go with them, start on 13 May 2027 (G.S.R. 843(E)). Until then you can still write to a company and ask. Many will answer. But they are not yet bound by these sections. **Keep this ready before you start:** - The company's published method for rights requests. Rule 14 says companies must show it on their website or app. - The identifier they ask for, such as your username, customer ID or registered mobile number. 1. Find the company's rights or grievance page, or its Data Protection Officer contact. 2. Send a written request using the method they publish. Use our [request letter template](https://dpdpr.in/rights/rights-request-letter/). 3. Ask for what you need: a summary of your data and how it is used, and the names of everyone it was shared with (section 11); correction, completion, updating or erasure (section 12); or a fix for a grievance (section 13). You can also nominate someone to act for you after death or incapacity (section 14), and withdraw consent (section 6(4)). 4. Save the acknowledgement or ticket number. 5. Wait for the time they publish. Rule 14(3) says it cannot be more than 90 days. 6. If they refuse or do not answer, you can complain to the Data Protection Board of India. You must use the company's grievance route first (section 13(3)). 7. The Board works as a digital office. Use the method it publishes on its website and app (rule 19). We will add the link when the Board publishes it. Checked on 1 November 2026 against: [Digital Personal Data Protection Act, 2023 (MeitY copy of the Gazette)](https://www.meity.gov.in/static/uploads/2024/02/Digital-Personal-Data-Protection-Act-2023.pdf), [Digital Personal Data Protection Rules, 2025 (G.S.R. 846(E))](https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf), [G.S.R. 843(E): start dates for the Act](https://www.meity.gov.in/static/uploads/2025/11/c56ceae6c383460ca69577428d36828b.pdf). ## Ready-to-use complaint Copy, fill the brackets, and send it through the company's official channel. Keep a copy. To: Grievance Officer, \[app\] Subject: Misuse of my contact details after trip / order \[ID\] After my trip / order \[ID\] on \[date\], the \[driver / delivery partner\] kept contacting me from \[number\]. My number and address were for this trip only. Please stop this, tell me what action you took, and confirm how long you keep my contact and location data. \[Name\], \[registered mobile\], \[date\] ## Time limits - E-commerce grievance: 48 hours to acknowledge, one month to resolve. - Threats or stalking: report to the police right away, or on cybercrime.gov.in. - Consumer case: within 2 years. - DPDP rights: from 13 May 2027. ## If this happened to you - [\*\*A customer care number turned out fake, or a real agent misused my data\*\*A helpline number you found online led to a scammer, or a real support agent misused your details.](https://dpdpr.in/rights/scenarios/fake-customer-care/) - [\*\*Someone called with personal details I never shared with them\*\*A caller knew your name, address, purchases or family details, and named a company.](https://dpdpr.in/rights/scenarios/caller-knew-my-details/) - [\*\*A company keeps sending marketing after I said stop\*\*Calls, SMS or emails continue after you opted out or registered DND.](https://dpdpr.in/rights/scenarios/marketing-after-opt-out/) - [\*\*A delivery person or courier kept my number and is contacting me\*\*A delivery person messages or calls you after delivery, or a 'courier' calls about a parcel.](https://dpdpr.in/rights/scenarios/delivery-partner-misuse/) - [\*\*A ride app driver keeps calling and texting me from different numbers after the ride\*\*After a trip, the driver sends messages like 'Hi' or 'call me' on SMS or WhatsApp, from more than one number.](https://dpdpr.in/rights/scenarios/ride-driver-contacting-me/) - [\*\*A bike taxi rider texted or video called me after drop off\*\*After a bike taxi ride, the rider contacted you on WhatsApp, by text or video call.](https://dpdpr.in/rights/scenarios/bike-taxi-rider-contacted-me/) - [\*\*An auto or cab driver abused me after I cancelled and sent messages to my number\*\*You cancelled a ride, and the driver called or messaged abuse.](https://dpdpr.in/rights/scenarios/driver-abused-after-cancel/) - [\*\*I got a cash on delivery parcel I never ordered, or someone placed orders in my name\*\*A courier brings a parcel you did not order and asks for cash, or orders appear under your name.](https://dpdpr.in/rights/scenarios/cod-parcel-never-ordered/) ## Official sources - [Ministry of Road Transport and Highways: Motor Vehicle Aggregator Guidelines, 2025](https://parivahan.gov.in/sites/default/files/NOTIFICATION%26ADVISORY/MV-Aggregators-Guidelines-2025%20-%20English%20and%20Hindi.pdf) - [National Consumer Helpline FAQ: Consumer Protection (E-Commerce) Rules, 2020](https://consumerhelpline.gov.in/faq-details.php?fid=E-Commerce) - [National Consumer Helpline (Department of Consumer Affairs)](https://consumerhelpline.gov.in/public/) - [Digital Personal Data Protection Act, 2023 (MeitY copy of the Gazette)](https://www.meity.gov.in/static/uploads/2024/02/Digital-Personal-Data-Protection-Act-2023.pdf) - [G.S.R. 843(E): start dates for the Act](https://www.meity.gov.in/static/uploads/2025/11/c56ceae6c383460ca69577428d36828b.pdf)