Law firm Morgan & Morgan is pursuing claims on behalf of DoorDash app users who say their personal data was secretly collected and shared with advertisers without their consent, in a case tied to underlying federal litigation against data analytics company Amplitude, Inc.

The stakes are notable: the underlying case covers potentially millions of DoorDash users nationwide, and a federal judge has already allowed the core privacy allegations to move forward rather than dismissing them outright.

This case follows a broader wave of app-based privacy litigation targeting hidden third-party tracking software embedded in popular consumer apps.

In this article, you’ll learn what the Morgan and Morgan DoorDash lawsuit actually alleges, who the real defendant is, who may qualify for a claim, and what current claim status looks like as of mid-2026.

Here’s a detail that surprises many DoorDash users: the company being sued isn’t DoorDash itself — it’s Amplitude, a data analytics firm whose tracking software was embedded inside the DoorDash app and several others, including a meditation app.

Quick Facts

Plaintiffs	DoorDash app users, represented in the underlying federal case by named plaintiff Kyle Atkins
Defendant	Amplitude, Inc. (a third-party data analytics company embedded in the DoorDash app)
Court	U.S. District Court for the Northern District of California, Case No. 3:24-cv-04913, before Judge Rita F. Lin
Case Type	Underlying putative class action now compelled to individual mass arbitration — not a certified class action
Core Allegation	Amplitude allegedly collected geolocation data, device identifiers, and personal information from DoorDash users without consent and shared it with advertisers
Filing Date	Underlying complaint filed August 2024; arbitration-compelling ruling issued September 2, 2025

What Is the Morgan and Morgan DoorDash Lawsuit About?

The Morgan and Morgan DoorDash lawsuit refers to a client-intake campaign the law firm runs for consumers who say their private data was harvested through the DoorDash app without their knowledge or consent.

The underlying legal claims originate from a federal case, Atkins v. Amplitude, Inc., alleging that Amplitude’s software development kit, embedded in the DoorDash app, secretly captured users’ geolocation history, device identifiers, and other personal data, then shared it with third-party advertising platforms like Facebook Ads and TikTok Ads.

Key Takeaway: DoorDash is the app where the tracking allegedly happened, but the actual defendant in the underlying litigation is Amplitude, Inc. — an important distinction for anyone trying to understand who is actually being sued.

DoorDash Privacy Lawsuit: Class Action or Arbitration? Legal Status Overview

This case is not proceeding as a traditional court-based class action. A federal judge ruled that affected DoorDash users must pursue their claims individually through arbitration rather than as a certified class.

• Original Filing: A putative class action complaint was filed against Amplitude, Inc. in August 2024 in the U.S. District Court for the Northern District of California.
• Arbitration Ruling: On September 2, 2025, Judge Rita F. Lin ruled that Amplitude, despite not being a signatory to DoorDash’s own terms of service, could enforce the arbitration agreement DoorDash users had already agreed to, compelling individual arbitration instead of class litigation.
• Merits Finding: The same ruling reportedly declined to dismiss the underlying privacy claims, finding that plaintiffs adequately alleged a concrete privacy harm and a lack of consent to the data sharing.

Key Takeaway: The claims themselves survived judicial scrutiny — they simply have to be pursued one arbitration case at a time rather than as a single class action, which is why firms like Morgan & Morgan shifted to a mass-arbitration strategy.

Latest Update 2026

As of this writing in mid-2026, the case remains in the mass arbitration phase, with claims proceeding individually rather than through a single court judgment or class settlement.

• Morgan & Morgan has pursued a mass arbitration strategy, filing large numbers of individual arbitration claims simultaneously in an effort to create the kind of collective pressure typically associated with class actions.
• Reports indicate settlement discussions are considered plausible, since defending thousands of simultaneous individual arbitration proceedings is often more costly for a company than negotiating a broader resolution.
• According to Morgan & Morgan’s own claim intake page, the firm has, at various points in 2026, both accepted new claims and temporarily paused new intake, directing prospective claimants to a waitlist — meaning claim availability can change and should be confirmed directly with the firm before assuming you can sign up today.

Key Takeaway: This case has moved past the dismissal stage but has not reached a confirmed settlement — claim intake status can fluctuate, so anyone interested should verify current availability directly rather than relying on older marketing pages.

Key Allegations: How Amplitude Allegedly Tracked DoorDash Users

The underlying complaint describes a detailed pattern of alleged undisclosed data collection.

• Amplitude’s embedded software reportedly collected users’ geolocation data, revealing where they live, work, and frequently travel.
• The complaint alleges Amplitude also collected device identifiers, names, and email addresses tied to DoorDash accounts.
• This data was allegedly shared with third-party marketing platforms, including Facebook Ads and TikTok Ads, without clear user consent.
• The lawsuit alleges this conduct violated federal and state wiretap statutes, along with state invasion-of-privacy and computer data fraud laws.
• Amplitude’s software was reportedly embedded in other consumer apps as well, including at least one meditation app, according to related reporting.

Key Takeaway: The core claim isn’t that DoorDash mishandled an order or a payment — it’s that a hidden third-party tool allegedly turned ordinary app usage into a stream of trackable personal data shared with advertisers.

Is DoorDash Itself Being Sued? Myth-Check

Not directly, at least not as the primary named defendant in this specific litigation. The formal defendant in Atkins v. Amplitude, Inc. is Amplitude, the analytics company, not DoorDash, Inc.

DoorDash’s involvement stems from having embedded Amplitude’s software development kit into its app, and DoorDash’s own arbitration agreement with users is what Amplitude successfully used to compel individual arbitration. Still, because the tracking allegedly occurred through the DoorDash app, most marketing and consumer coverage of this case understandably refers to it using DoorDash’s name.

Key Takeaway: If you’re looking for a lawsuit where DoorDash itself is the primary defendant, this isn’t quite that case — it’s a claim against DoorDash’s data analytics vendor, with DoorDash’s own terms of service playing a key procedural role.

Amplitude and DoorDash Company Background

Amplitude, Inc. is a data analytics company whose software is embedded in numerous popular consumer apps to help those apps’ developers understand user behavior. DoorDash is one of the largest food delivery platforms in the U.S., widely used across most major metro areas.

According to the underlying complaint, Amplitude’s tracking tools allegedly went beyond standard analytics, capturing sensitive location and personal data and passing it to advertising networks without adequately disclosing this practice to end users of apps like DoorDash.

Key Takeaway: This case illustrates a common but often invisible practice in app development — third-party analytics tools embedded by app developers can collect and share more data than users, or even the primary app company, may fully disclose.

Consumer Complaints About DoorDash Data Privacy

Public concern around this case has centered on the surprise factor: many DoorDash users were unaware that a third-party company, rather than DoorDash itself, may have had access to their location history and personal identifiers.

• Consumers and privacy advocates have raised concerns about geolocation data being used to build detailed profiles of where people live, work, and travel.
• Consumer Watchdog and similar organizations have highlighted this case as an example of hidden third-party tracking across multiple unrelated apps sharing the same embedded software.
• The case has drawn attention specifically because affected users may never have realized Amplitude was involved at all, since it operates behind the scenes rather than as a consumer-facing brand.

Key Takeaway: Much of the public concern here isn’t about DoorDash’s core service — it’s about the broader practice of embedding third-party trackers inside popular apps with limited visibility for the end user.

Who Qualifies for the Morgan and Morgan DoorDash Claim? Eligibility Criteria

Based on Morgan & Morgan’s own published criteria, prospective claimants generally need to meet the following:

• Used the DoorDash app and placed one or more orders on or after January 1, 2023.
• Had account or usage data generated during that time, regardless of whether the account is still active today.
• Were not clearly informed about the data collection or third-party sharing practices described in the complaint.

Important: These criteria reflect Morgan & Morgan’s own marketing materials for claim intake, not a court-certified class definition, since this case is proceeding through individual arbitration rather than a class action.

Potential Payout: What Compensation Could Look Like

No court-confirmed settlement or judgment amount exists for this case as of this writing. Some legal marketing materials associated with this claim reference potential statutory damages of “$1,000 or more per eligible claimant” under applicable federal and state privacy and wiretap statutes, but this figure should be treated as an estimate from firm marketing rather than a guaranteed or court-awarded amount.

• Because claims proceed individually through arbitration, any payout would be determined case-by-case rather than through a single settlement fund distributed among a certified class.
• Reports indicate settlement negotiations covering large groups of claimants are plausible given the volume of arbitration filings, though no such global resolution has been publicly confirmed.

Key Takeaway: Treat any specific dollar figure you see associated with this claim as an estimate based on relevant statutes, not a confirmed or typical payout, since no settlement or arbitration award total has been publicly disclosed.

How a DoorDash Privacy Claim Payout Could Be Calculated

If individual arbitration claims proceed to an award, or if a broader negotiated resolution is reached, compensation would likely be evaluated using factors similar to other privacy and wiretap claims:

1. Whether the claimant used the DoorDash app during the relevant period and can show an account or usage history.
2. The specific state and federal statutes applicable to that claimant’s location, since wiretap and privacy laws vary in their statutory damage ranges by state.
3. Whether the claim is resolved individually through arbitration or as part of a broader negotiated group settlement, which could affect how uniformly payouts are calculated.

This process is inherently case-by-case given the mass arbitration format, unlike a single, uniform class action settlement formula.

How to File a Claim With Morgan and Morgan: Current Status

As of this writing, claim intake status for this specific matter has fluctuated. Morgan & Morgan’s own DoorDash privacy claim page has, at points in 2026, stated it is “no longer accepting claims” for this matter and has directed interested users to join a waitlist to be notified if intake reopens.

If you believe you may be eligible and want to check current status, the general process Morgan & Morgan describes for claims like this one includes:

• Submitting basic information, such as DoorDash account usage dates, through the firm’s online intake form.
• Receiving a free eligibility evaluation, offered on a contingency-fee basis with no upfront cost.
• If accepted, having your claim filed as part of the firm’s coordinated mass arbitration effort against Amplitude.

Key Takeaway: Because intake availability can change, confirm current status directly on Morgan & Morgan’s official claim page or by contacting the firm before assuming you can submit a new claim today.

Filing Deadline and Statute of Limitations

No universal claims deadline has been publicly disclosed for this matter, since it is not governed by a single class action settlement with one filing cutoff. Instead, individual claimants are generally subject to the underlying statutes of limitations for wiretap, privacy, and related state-law claims, which vary depending on the specific law and state involved.

Given that claim intake has reportedly opened and closed at different points, prospective claimants interested in this matter should not assume unlimited time to act, even though no single, universal deadline has been published.

Key Takeaway: Don’t wait to inquire simply because no single deadline has been publicized — both claim intake availability and underlying legal statutes of limitations can each independently cut off your ability to participate.

Is the Morgan and Morgan DoorDash Lawsuit a Scam?

The underlying litigation, Atkins v. Amplitude, Inc., is a real federal case, and Morgan & Morgan is a real, established law firm handling the resulting mass arbitration claims. However, the significant social media promotion of this claim, particularly on platforms like TikTok, has also likely attracted unrelated third parties trying to capitalize on the attention.

• Only submit personal information through Morgan & Morgan’s official website or verified firm contact channels, not through unofficial social media links or unaffiliated “claim processing” sites.
• Legitimate claims through an established contingency-fee firm should never require you to pay money upfront to participate.
• Be skeptical of any source promising a guaranteed specific payout amount, since no confirmed settlement or arbitration award has been publicly disclosed for this matter.

Key Takeaway: The case itself is legitimate, but the viral attention around it makes it a plausible target for copycat or scam claim-collection sites — stick to verified, official channels.

Other Related DoorDash Lawsuits for Context

The Amplitude data-tracking claim is not the only legal matter DoorDash-related entities are currently facing. A separate case, Andrizzi v. DoorDash Incorporated, No. 3:25-cv-09926, involves a proposed class action over a November 2025 data breach in which DoorDash allegedly failed to implement reasonable cybersecurity measures, exposing names, emails, phone numbers, and addresses of customers, employees, and merchants. That case names DoorDash, Inc. directly as the defendant and is legally distinct from the Amplitude arbitration matter.

DoorDash has also faced a wrongful death lawsuit, George v. Doordash Inc., filed in Riverside County, California Superior Court in January 2026, involving a fatal collision allegedly caused by a Dashers making deliveries. That case is an individual matter unrelated to the privacy claims described here.

Key Takeaway: If you’re researching “the DoorDash lawsuit,” make sure you know which one you mean — the Amplitude data-tracking arbitration claims covered in this article are legally separate from the 2025 data breach case and any individual injury lawsuits involving DoorDash drivers.

Read: Naviance Class Action Lawsuit
Read: TurboTax Lawsuit
Read: Costco Auto Renewal Lawsuit
Read: Mario Lopez Lawsuit
Read: Carnival Tequila Lawsuit

Frequently Asked Questions

What is the Morgan and Morgan DoorDash lawsuit about?

The Morgan and Morgan DoorDash lawsuit refers to claims the firm is pursuing on behalf of DoorDash app users against Amplitude, Inc., a third-party data analytics company. The underlying case, Atkins v. Amplitude, Inc., alleges Amplitude’s software secretly collected geolocation data and personal information from DoorDash users and shared it with advertisers without consent. A federal judge ruled in September 2025 that these claims must proceed through individual arbitration rather than a class action.

Who qualifies for the Morgan and Morgan DoorDash claim?

Based on Morgan & Morgan’s published criteria, individuals who used the DoorDash app and placed orders on or after January 1, 2023, and who were not clearly informed about third-party data collection and sharing, may potentially qualify. Because this case proceeds through individual arbitration rather than a certified class action, formal eligibility is ultimately assessed case-by-case by the firm, and claim intake availability has fluctuated during 2026.

How much could the Morgan and Morgan DoorDash claim pay out?

No court-confirmed settlement or typical award amount has been publicly disclosed. Some marketing materials associated with the claim reference potential statutory damages of $1,000 or more per eligible claimant under applicable privacy and wiretap laws, but this is an estimate based on relevant statutes, not a guaranteed payout, and actual amounts would depend on individual arbitration outcomes or any future negotiated resolution.

Why is this case going through arbitration instead of a class action?

A federal judge ruled on September 2, 2025, that Amplitude, despite not being a signer of DoorDash’s terms of service, could still enforce the arbitration agreement that DoorDash users had already accepted, which required affected users to pursue claims individually rather than as a single class. In response, Morgan & Morgan shifted to a mass arbitration strategy, filing large numbers of individual claims at once to preserve some of the collective leverage a class action would normally provide.

Is there a deadline to file a Morgan and Morgan DoorDash claim?

There is no single, universal settlement deadline publicly disclosed for this matter, since it is not resolved through one class action settlement. However, claim intake with Morgan & Morgan has opened and closed at different points, and underlying state and federal statutes of limitations still apply to individual privacy and wiretap claims, so prospective claimants should confirm current intake status and applicable deadlines directly with the firm rather than assuming unlimited time.

What DoorDash Users Should Watch For Next

The Morgan and Morgan DoorDash lawsuit centers on real, still-developing litigation against Amplitude, Inc. over alleged secret data tracking inside the DoorDash app, but it has not yet resulted in a confirmed settlement or a predictable per-person payout.

Because this case proceeds through mass arbitration rather than a certified class action, there’s no single claims deadline or settlement fund to track the way there would be in a typical class action — outcomes are being resolved claim by claim.

What’s worth doing if you think you may be affected:

• Check Morgan & Morgan’s official claim page directly for current intake status before assuming you can file today.
• Save any records of your DoorDash account history and usage dates, in case eligibility needs to be documented later.
• Watch for developments in the underlying arbitration proceedings, since a broad negotiated resolution could still emerge given the volume of individual claims filed.

Readers should rely on official law firm communications and verified legal news coverage for updates, given how much unofficial, and sometimes inaccurate, chatter this case has generated on social media.

• MLex, “Amplitude can enforce arbitration in wiretapping case, fails to win dismissal”
• MLex, “Claims of Amplitude’s secret data harvesting from DoorDash headed to arbitration”
• Bloomberg Law, “DoorDash Consumers Must Arbitrate Amplitude Data Privacy Claims”
• Bloomberg Law, “Amplitude Snares Private Data of Millions Via Apps, Suit Says”
• Consumer Watchdog, “Software Used By a Meditation App and DoorDash is Being Sued For Sending Personal Data to Unknown Third Parties Without Consent”
• Morgan & Morgan (ForThePeople.com), “DoorDash Data Privacy Claim” practice area page
• ClassAction.org, complaint filing for Atkins v. Amplitude, Inc., No. 3:24-cv-04913 (N.D. Cal.)
• ClassAction.org, “DoorDash Lawsuit Claims Company Failed to Protect Private Info of Customers, Employees and Merchants”

Sources

• MLex, “Amplitude can enforce arbitration in wiretapping case, fails to win dismissal”
• MLex, “Claims of Amplitude’s secret data harvesting from DoorDash headed to arbitration”
• Bloomberg Law, “DoorDash Consumers Must Arbitrate Amplitude Data Privacy Claims”
• Bloomberg Law, “Amplitude Snares Private Data of Millions Via Apps, Suit Says”
• Consumer Watchdog, “Software Used By a Meditation App and DoorDash is Being Sued For Sending Personal Data to Unknown Third Parties Without Consent”
• Morgan & Morgan (ForThePeople.com), “DoorDash Data Privacy Claim” practice area page
• ClassAction.org, complaint filing for Atkins v. Amplitude, Inc., No. 3:24-cv-04913 (N.D. Cal.)
• ClassAction.org, “DoorDash Lawsuit Claims Company Failed to Protect Private Info of Customers, Employees and Merchants”