Under the agreement, Uber is required to encrypt user location data while it is in transit from the user’s phone or between Uber’s servers and GPS data stored by the company must be protected by multi-factor authentication.