Where do services like taxis store users' linked bank cards?

Question

Information Security

Yesterday I downloaded another taxi application, and there, like in many, it is possible to attach a card and pay with it.
The question was: when I enter the card number, Expire Date, CVV, where does it all go? Stored in some database of this service? If so, why are people so easily trusted and tied cards? Because I don’t really believe that a taxi that works in only one city, let’s say, has some kind of good protection and cannot be hacked.
If it is stored in some kind of database, any attacker can take and take all the cards in a pack (not even an attacker, but some owner of the service), and then card himself, sell cards or engage in similar atrocities