This happened to me (I never used Uber.. signed up and forgot about it) and in my research I found out they know about the hacks and their PR message is its the user's fault for using a lame password.
What a horrible company.. run by the worst vile, corrupt, arrogant sociopaths ever!
It's an internet service .. I don't need to send an email to Facebook, twitter, etc to have my account canceled. Uber should be no different unless there's a pending charge then tell the user you can cancel after payment has cleared ...not wait until we feel like emailing you to handle your request because WE WANT TO LOCK YOU IN! I was and am still furious that I was unable to cancel my phantom Uber account immediately after my bank account got hacked.
Any web service following this scheme is not doing it for their users but for themselves!!!
Why are ppl defending this tactic because you use it at your startup and try to justify it as right when it's SO WRONG and hostile to your users.