Introduction

Modern vehicles have evolved into connected computers on wheels, collecting vast amounts of driver data without clear transparency. A new study reveals the extent of this data collection and what it means for consumer privacy.

What Happened

Researchers tested 21 vehicles and found every single one transmitted data to third-party domains over Wi-Fi. More than half of the vehicles contacted advertising companies, and seven companion mobile apps transmitted sensitive details like vehicle identification numbers, phone numbers and precise locations directly to advertising networks.

Why This Matters

When a vehicle's identification number pairs with personal identifiers, data brokers can assemble detailed profiles of individual drivers. The study found that certain platforms generate the highest volume of third-party communications, leveraging built-in routines that communicate with both the company's services and external trackers. Automakers have faced regulatory action, with the Federal Trade Commission recently penalizing General Motors for illegally selling location and driving habit data to insurance companies.

Key Takeaways

  • All 21 tested vehicles transmitted data to third-party domains, primarily via Wi-Fi
  • Over half of the vehicles contacted advertising and tracking companies such as Adobe, LexisNexis and Amplitude
  • Seven companion mobile apps leaked vehicle identification numbers, phone numbers and location data to advertising networks
  • More than 70 percent of tested apps communicated with five or more unique advertising domains
  • Android Automotive OS vehicles contacted the highest number of third-party domains, reflecting the impact of software platform choices on data exposure
  • Regulatory action is increasing, but consumer awareness and control remain severely limited

Conclusion

The findings underscore a fundamental shift: your car is no longer just a mode of transportation, it's a data-generating device. Without transparent opt-in policies and easy-to-use privacy controls, drivers unknowingly surrender vast amounts of personal information. Automakers must prioritize clarity and consent, giving owners real power over what's collected and shared.