Let's explore this from the information security perspective, since that is my thing. If I had performed this research against Lyft and knew about these "inform

Let's explore this from the information security perspective, since that is my thing. If I had performed this research against Lyft and knew about these "information disclosure" issues I would have felt they were significant enough for disclosure to see them remediated. Why? Sweeping privacy concerns. In a world where most people have an Uber or a Lyft app installed security issues like this become spy machines. So it isn't just drivers that lose their privacy, in the long run it touches on everyone's privacy, because location data is notoriously hard to anonymize and machine learning is only getting better. So there is the first ethical argument against this behavior that pops to mind.