Connected car study reveals extensive data sharing with tech giants

A joint study by Northeastern University and Consumer Reports has revealed extensive data collection practices in modern connected vehicles. Researchers analyzed 21 recent car models from 19 different brands and 30 companion applications to determine how much personal information is transmitted to third parties.

The investigation found that 19 out of 21 vehicles contact at least one external company, while 28 of the 30 tested applications send information to advertising networks or analytics services. In several instances, sensitive identifiers such as the owner’s name, vehicle identification numbers (VIN), and geolocation data were transmitted.

Data is shared with a wide range of entities, including Google, Meta, car insurers, lenders, and data brokers. These third parties use the information for purposes such as creating personalized risk scores, telematics data exchanges, and targeted advertising. While manufacturers often obtain consent through lengthy privacy policies and infotainment system prompts, researchers note that drivers frequently accept these terms without fully understanding the extent of the surveillance.