Respondeat superior and vicarious liability don’t specifically require an employer-employee relationship.

Yes, agreed - I should have stated that this was one part of Uber's defense, in addition to the driver having agreed not to assault riders and having undergone a safety screening.