Uber is being investigated in several countries for covering up a data breach instead of reporting it.

More important than this secondary outrage is the reason why Uber had so much data ready for crackers to steal: its practice of making users pay by credit card, thus providing the data to Uber.

If you ride an ordinary taxi, and have the common sense to pay cash, it collects no data about you, and no breach in the taxi company can touch you.

If we require all digital payment systems to pay the merchant anonymously, so that the merchant gets no information except "you have been paid amount X", this will prevent a large fraction of the data breeches that are likely to happen.