Home · Technology · Sep 29 archive

Your car’s data privacy problems are worse than you think

Confirmed

Technology Desk

In Short: A study by Northeastern University and Consumer Reports reveals that modern vehicles transmit data to third-party domains, raising privacy concerns.

Car Dashboard
Martin Vorel / Openverse (cc0)

Researchers from Northeastern University, in collaboration with Consumer Reports, have published an in-depth examination of connected vehicle privacy behaviors, revealing that all 21 tested vehicles transmit data to third-party domains.

David Choffnes, project lead and former director of Northeastern’s Cybersecurity and Privacy Institute, said the goal was to highlight the extent of modern vehicle data tracking and the lack of control owners have over it.

YouTube — UpNorthLive YouTube

Choffnes noted that an automaker’s choice of software platform directly impacts how much data reaches third parties. He emphasized, “I think the conclusion is that there’s a lot to be worried about.”

The study also examined 30 companion mobile apps to understand the privacy implications of the connected vehicle ecosystem. It found that 19 of the 21 vehicles tested sent traffic to at least one third party and seven of the 30 apps gave sensitive data such as the vehicle identification number (VIN), emails, phone numbers, and precise location to third-party companies associated with tracking and advertising.

The legality of this data harvesting remains hotly debated. Last year, the Federal Trade Commission penalized General Motors for illegally collecting and selling precise location and driving behavior data without informed consent.

When contacted, most automakers shifted blame elsewhere, often to consumers. Honda, however, improved its data collection practices and ordered its vendor Amplitude to delete all geolocation data it had received.

Modern-day vehicles built with connected car technology such as WiFi and GPS collect vast amounts of data about their owners, including where they drive, how fast they accelerate, and how hard they brake.

The implications aren’t great for consumers, whose data is being shared with tech companies including Adobe, ContentSquare, Google, Microsoft, Meta, Snap, and Yahoo.

To address these concerns, it’s important for consumers to be aware of the data their vehicles are sharing and to consider the privacy settings and policies of their car manufacturers and companion apps.

What this adds

The study highlights the extent of data sharing in modern vehicles and the need for better consumer awareness and regulation.

Automakers' responses to the study varied, with Honda being the only one to take immediate action to improve data collection practices.

What's confirmed

What's still developing

Sources