As others have pointed out, they use an identify verification service. In most cases, any org that uses such a service doesn't even see the data the form is asking for (i.e. it's just a pass thru, much like CC# forms in IFRAMEs).

Granted, it is scary what is aggregated about you and stored in some giant data warehouse somewhere (prbly not protected very well). But I'd rather an org use a third-party such as this vs begin to aggregate similar data on their own.

However, think about what else UPS knows about you (without this data). They have your name, address, phone and know precisely (for all things they handle) how often you receive shipments from where, how much they weigh and potentially other data (depending on whether they've done any scanning or if there is any hazardous or perishable labeling on it). If they've ever tried to deliver and needed a sig and you weren't there, they have a record of when you're not home as well.

I wonder if they (or FedEx, et al) have a policy whereby you can request all the data they have stored on you like this…