technology & privacy••5 min read

Is Your Car Selling You Out? The Rising Privacy Risks of Modern Vehicles

Modern connected vehicles are doing much more than just driving you to your destination; they are acting as data-gathering hubs for big tech and third-party brokers. Recent studies reveal that your car and its companion app are likely leaking your private information, from your precise location to your unique identity.

Is Your Car Selling You Out? The Rising Privacy Risks of Modern Vehicles

The Passenger You Didn't Invite

For most drivers, a car is a private sanctuary—a space for morning commutes, private phone calls, and family road trips. However, researchers at Northeastern University and Consumer Reports have found that your vehicle is likely serving as a silent informant. Modern connected cars are sophisticated data-collection machines that frequently transmit your habits, identity, and location to third-party advertising and analytics firms.

The scope of this surveillance is startling. Studies show it is now effectively impossible to purchase a new, fully connected car that doesn't track your movements or share data with external parties. Whether it's the vehicle's onboard computer or the mobile app you use to unlock your doors, your personal data is moving through a pipeline you likely never approved.

Modern connected vehicles often share data with a web of third-party advertising and analytics companies.
Modern connected vehicles often share data with a web of third-party advertising and analytics companies.

How the Data Trail Works

The danger lies in how easily your driving data can be deanonymized. Researchers discovered that a significant number of vehicle apps transmit your Vehicle Identification Number (VIN) alongside personal identifiers like your name or email address. When these pieces of information are combined, data brokers can easily link your driving behavior to your broader digital footprint.

  • Precise geographic location tracking.
  • Linking driving behavior to insurance profiles via data brokers like LexisNexis.
  • Sharing of personally identifiable information (PII) like names and email addresses.
  • Integration of driving data with online shopping and browsing history profiles.

This information is then sold to a variety of entities, including insurers, banks, and pharmaceutical companies. In some cases, such as the lawsuit against Allstate and its subsidiary Arity, state officials have alleged that drivers' data was harvested through smartphone software without adequate disclosure or consent.

Almost a quarter of the vehicles’ apps were found to be sending out personally identifiable information, including vehicle owners’ names, vehicle identification numbers (VINs), and precise geographic locations.

— Consumer Reports

Can You Protect Your Privacy?

While completely disconnecting from the grid is difficult, there are steps to take. Experts suggest checking your privacy settings within your car’s infotainment system and within any associated smartphone apps. Users can also look into 'Right to Opt Out' requests, which legally require companies to stop sharing your personal information with third parties. However, as the industry continues to prioritize data monetization, the burden remains heavily on the consumer to secure their digital footprint.

Key Takeaways

  • Modern vehicles are effectively tracking devices that share data with third-party brokers.
  • Combining your VIN with your email or name allows companies to build a detailed profile of your life.
  • Driving data is frequently sold to insurance companies, which can impact your premiums.
  • Even mobile apps associated with your vehicle often transmit location and identity data.
  • Opt-out requests are currently one of the few legal tools available to consumers to limit data sharing.

FAQ

Are all new cars spying on their drivers?

Most modern connected vehicles engage in some form of data collection and transmission. Research indicates it is nearly impossible to find a new, connected vehicle that does not track you to some degree.

What kind of data do cars collect?

Cars frequently collect location history, VINs, speed, hard braking data, and sometimes even personal identifiers like names and email addresses through companion apps.

Who buys the data collected by my car?

Data brokers aggregate this information and sell it to insurance companies, banks, retailers, and pharmaceutical companies to create comprehensive consumer profiles.

How can I stop my car from sharing my data?

You can review your privacy settings in your car's infotainment system, limit app permissions on your phone, and file formal 'Right to Opt Out' requests with your automaker.

Related Videos

The Truth About Your Car’s Secret Data Leaks!

Security Weekly - A CRA Resource

Facial Recognition in Cars | The Privacy Nightmare Nobody's Talking About

Blind Spot

8 Car Features That SPY On You & SELL Your Data

Under the Bonnet

Sources