But Uber said in a statement that the complaint has "no basis" and that users would "be in control" of how they release personal information.
"Our new privacy statements are much simpler to read and set out more clearly the data we collect, as well as how we use it," the company said.
EPIC also claims that Uber will be able to access passenger's contact lists, which it could use to send out promotional ads.
But exacerbating the possibility of privacy invasion, said EPIC, is that Uber could abuse its users' trust. According to EPIC, Uber tracked the location of journalists reporting on the company who had used its app, and one employee shared that data within the company. Other employees had turned on "God View," an internal program, to track customers without their knowledge.
Uber has acknowledged that it could potentially track location data and contact lists as it launches new features on the app, but said it would do so only with the permission of users. Whether that would be through opting-in or opting-out has yet to be seen. For now, Uber said it does not plan to begin either practice on July 15.
"Users will be in control: they will be able to choose whether to share the data with Uber," the company said in a statement.
The FTC could not be reached Monday, and has not publicly stated how it plans to address the complaint.