Open the DoorDash app and tap into your account settings, then scroll to the bottom.
There it is, tucked behind a couple of menus most people never touch: a running log of every address you've ever ordered to, tied to your name, your phone number, and a timestamp.
It's just sitting there, waiting for anyone who picks up your unlocked phone.
Most users assume that data lives only on their own device.
It's stored server-side, which means it survives app deletions, phone upgrades, and even the account you swore you closed last year.
Lunches at an office you got laid off from in 2023.
A delivery to your mom's house the week she was recovering.
Every entry is a breadcrumb that says where you were, when you were there, and what you were doing.
DoorDash has faced multiple data incidents over the years, and delivery apps broadly have become a favorite target for credential-stuffing attacks, where stolen passwords from other breaches get tried against food accounts.
A compromised DoorDash login doesn't just mean someone orders a burrito on your card.
It means they get your home address, your work address, and the pattern of when you're at each.
Drivers get your drop-off location, gate codes, and often your apartment number.
But the system is built so that a stranger knows exactly which door is yours, and you know nothing about them.
DoorDash has spent years building what analysts call a "logistics layer" over American suburbs and cities.
That means addresses, traffic patterns, restaurant inventories, and increasingly, grocery and retail purchase histories.
It's a portrait of how millions of households spend money and move through the world, and it's owned by a private company with shareholders to please.
Go into your account, delete old addresses you don't use.
Turn off precise location permissions when you're not ordering.
Use a unique password and two-factor authentication.
These steps don't make you invisible, but they shrink the target. **The takeaway:** convenience always has a price, and the receipt is your own address history sitting on someone else's server.
If you wouldn't hand a stranger a notebook listing everywhere you sleep, it's worth asking why you're comfortable letting an app keep one.
Final Thoughts
Check your settings this week, because the data you don't think about is the data that gets used.