Did you track a package on Google? A new class action claims Google and UPS shared your data.

On Oct. 9, 2026, Lennie Woodley and Joseph S. Schrant filed a class action lawsuit against Google LLC and United Parcel Service of America Inc. in the U.S. District Court for the Northern District of California.

The lawsuit alleges Google's package-tracking widget tells users it will send only a tracking number to the carrier yet clicking its track button sends data to many outside companies.

How the tracking widget reportedly works

Google announced the widget's carrier program in late 2019 and reviewed and approved each carrier's integration, including UPS's, the lawsuit claims. A Google search for a tracking number pulls up tracking information for a package. For a UPS shipment, the search allegedly says, “Only your tracking number will be sent to UPS."

However, the filing claims that conducting a tracking search sends 415 network requests to at least 28 web domains for a UPS package and 142 requests to at least 19 domains for a FedEx package. Meta, Google's DoubleClick and Analytics platforms, Adobe, Microsoft Bing, The Trade Desk, Tealium and Quantum Metric all received data, the complaint alleges.

The shared data reportedly included:


  • The tracking number

  • IP addresses

  • Device and browser details

  • Facebook account IDs

  • Advertising and visitor identifiers

A UPS tracking number alone can reveal the recipient's name, the sender and recipient locations and the type of delivery address, the lawsuit contends. Code on UPS's website allegedly recorded a user's screen, mouse movements and keyboard inputs then sent the recording to Quantum Metric in real time.

The plaintiffs claim these companies use the data to build consumer profiles, sort people into audience groups and target ads. Google's package-tracking requirements for carriers say it does not accept personal or geographic data about a package's sender or recipient; however, the class action alleges the company still received such data through its Analytics and DoubleClick platforms.

Woodley and Schrant each say they would not have used the package-tracking tool had they known it would send their information to outside companies.

The legal claims

The proposed class action brings five claims:


  • Invasion of privacy, which covers serious invasions of privacy rights

  • Intrusion upon seclusion, which covers highly offensive intrusions into private matters

  • California Invasion of Privacy Act, Penal Code Section 631, which is the state's wiretapping law

  • Common law fraud, deceit and misrepresentation, which targets the widget's tracking number line

  • Unjust enrichment, which covers profiting at someone else's expense

The wiretapping claim covers only people who used the widget in California. For each violation, the plaintiffs seek $5,000 or three times their actual losses, whichever is more. The lawsuit also seeks damages, including punitive damages, the companies' alleged profits from the data, an order to stop the practices and attorneys' fees.

What the lawsuit means for Google Search users

The proposed class covers everyone who used the package-tracking widget on Google Search in the United States and clicked or pressed the track button plus a California subclass for those who did so while in California. There is no settlement, no claims process and no money available at this time.