A robotaxi pulls up to the curb in Los Angeles. The front seat is empty, no driver in sight. The customer slides into the back seat, and off the ride goes to a destination typed into the app, its cameras and sensors silently collecting where she goes and maybe even recording what she looks like or says inside. When the ride ends, payment is automatically processed through a stored credit card, and the passenger receives a prompt to rate her experience. What happens to all this data? Is it privacy-protected? Is it safe?