Automatic Transmission – a data-privacy study of connected vehicles
A study of 21 connected vehicles and 30 companion apps found that 19 cars and several apps transmit telemetry and sensitive personal data to third-party advertisers and trackers.
read it Real-world empirical testing of 21 connected cars and companion apps provides concrete numbers on how much telemetry leaks to third-party trackers.
summary
Researchers from Northeastern University and Consumer Reports tested 21 modern vehicles and 30 companion apps to measure data privacy leakage. They discovered that 19 of the cars and 7 of the apps actively transmit sensitive identifiers and location data to third-party advertising and tracking domains. Companion apps frequently double a vehicle's data exposure to external trackers. When confronted, manufacturers generally shift blame and offer consumers no viable way to opt out without losing essential vehicle functions.
key points
- 19 out of 21 tested vehicles contacted third-party tracking or advertising domains over Wi-Fi.
- Companion mobile apps double a vehicle's data exposure to external trackers on average, with several transmitting raw PII like VINs and precise locations.
- Manufacturers provide no realistic opt-out mechanism without disabling core vehicle features like remote start.
who should read it
Automotive security researchers, privacy advocates, and consumers considering purchasing a modern connected vehicle.
discussion skeptical
consensus
Commenters overwhelmingly express frustration over mandatory telemetry, lack of physical opt-outs, and the dystopian prospect of insurance companies weaponizing driving data. Many advocate for keeping older, pre-connected cars or physically pulling cellular modem fuses.
pushback
A few commenters suggest that safety monitoring or tracking dangerous driving is acceptable or legally inevitable, though this view receives heavy pushback regarding data misuse.
I currently drive a mid 2000s Ford truck, which runs great and meets my needs, but lately I got interested in minivans/people carriers. I pretty quickly realized that newer vehicles seem to not just record, but export a lot of driving data.
The minivan market is small. There are really only 4-5 available and every single one sends telemetry data from the car and makes it hard/impossible to opt out of selling your data. Additionally, without pretty extensive work there is no means of physically disabling the telemetry, which forces you to trust they'll honor your opt out request (vs …
It highlights the practical dilemma faced by car buyers who want to avoid telemetry but find zero modern options that allow opting out of data sales.
Generated by an LLM from the article and thread. Check the sources before relying on it.