Major report says most car apps are leaking sensitive data to brokers

Consumer Reports has published a study revealing extensive privacy breaches across the automotive industry. Big Tech firms are receiving considerable amounts of personal data from cars without users' knowledge, raising concerns about potential misuse. Consumer Reports, in collaboration with Northeastern University, tested numerous vehicles and found that nearly every automaker sent data to outside companies.

A significant concern is the leakage of personally identifiable information, including vehicle owners' names, VINs, and precise geographic locations, which could be sold to data brokers and used for malicious purposes such as stalking, identity theft, or medical fraud. The study highlights that these data breaches are primarily due to carmakers' connected apps and the platforms that operate advertising auction systems, which are often provided by prominent tech companies like Amazon, Google, Meta, Microsoft, Pinterest, Snap, and Yahoo.

While some automakers allow users to opt out of data sharing, doing so may result in reduced vehicle functionality or even inoperability, as seen with Tesla's data-sharing agreement. The findings underscore the extensive personal data ecosystem that consumers unknowingly enter when purchasing and using everyday consumer products like cars.