Your car’s data privacy problems are worse than you think / A team of researchers tested 21 vehicles and found that all of them transmitted data to a third-party domain. And over half were pinging advertising companies.

Every new car sold transmits personal driving and location data to advertising and tracking companies, even when you don't know it's happening.

Researchers from Northeastern University, in collaboration with Consumer Reports, analyzed data privacy practices across 21 vehicles from 19 different brands and their associated 30 mobile apps. The study found that every vehicle transmitted data to at least one third-party domain over Wi-Fi, with over half sending data to advertising, tracking, or analytics (ATA) domains. Seven companion apps were identified as transmitting sensitive information such as vehicle identification numbers (VINs) and precise locations directly to advertising networks. Vehicles utilizing platforms like Google's Android Automotive OS with Google Automotive Services showed the highest number of third-party domain contacts. Some automakers have begun addressing the findings, with Honda requesting data deletion and updating its app. The researchers highlighted a significant lack of consumer visibility and control over the data collected by modern vehicles.

The study reveals a pervasive pattern of data sharing in connected vehicles, extending beyond automakers to third-party advertising and analytics firms. This practice, often obscured by complex privacy policies, means consumers may not realize their driving habits, locations, and even vehicle identifiers are being collected and potentially monetized. The reliance on third-party domains, particularly within integrated operating systems like Android Automotive, suggests that software platform choices significantly influence data leakage.

This widespread data collection by advertising technology companies impacts consumer privacy by creating detailed profiles that could be used for targeted advertising or sold to other entities, such as insurance companies. The findings suggest that current opt-out mechanisms are insufficient and that automakers need to implement more explicit opt-in processes and enhance transparency to regain consumer trust. Future developments will likely involve increased scrutiny from regulatory bodies and greater demand for robust data protection features in vehicles.