Sounds like unroll.me's customers were Lyft users and unroll.me had access to their emails and/or inboxes in order to "see" the ride receipts.