The car in your driveway knows more about you than you might realize. It knows where you live, where you work, and every stop in between. It knows how fast you accelerate, how hard you brake, and whether you wear your seatbelt. Some vehicles can even detect stress in your voice and monitor your eye movements.
In 2023, the Mozilla Foundation reviewed 25 major car brands and declared automobiles the "worst category of products for privacy we have ever reviewed." Every single brand collected more personal data than necessary, and 84% shared or sold that data. The situation has only intensified since then.
This isn't about paranoia—it's about informed consent. You deserve to know what data your car collects, who receives it, and what choices you have. This investigation reveals the hidden data economy that's been built around your driving habits.
What Data Is Collected
Modern vehicles are rolling data centers, equipped with dozens of sensors, cameras, and connectivity modules. Here's what they're monitoring:
Driving Behavior Data
Speed and Acceleration
Every acceleration, braking event, and speed reading is logged. Some manufacturers track this second-by-second.
Location History
GPS logs create a complete record of everywhere you've driven, including arrival/departure times and duration of stops.
Hard Braking/Cornering
Aggressive driving events are flagged and recorded, creating a "driving score" whether you know it or not.
Driving Patterns
Time of day, day of week, trip frequency—all analyzed to build behavioral profiles.
In-Cabin Monitoring
Interior Cameras
Driver monitoring cameras can capture facial expressions, eye movements, and in some cases, full cabin video.
Voice Recordings
Voice assistant interactions may be recorded and sent to cloud servers for processing and "improvement."
Seat Sensors
Detect occupancy, weight (including whether a child seat is present), and seatbelt usage.
Biometric Data
Some vehicles monitor heart rate via steering wheel sensors or camera-based detection.
Connected Services Data
Phone Integration
When you connect your phone, the car may download contacts, call history, and text messages.
Media Preferences
What you listen to, radio station preferences, and podcast habits.
App Usage
Interactions with built-in apps, navigation searches, and settings changes.
"Your car now knows more about your daily life than your smartphone. The difference is that your phone asks permission for most data collection. Your car buries consent in 60-page privacy policies that nobody reads."
�?Dr. Amanda Foster
Who Gets Your Data
The data your car collects doesn't stay with the manufacturer. It flows through a complex ecosystem of partners, vendors, and data brokers.
Primary Data Recipients
The Manufacturer
Uses data for product development, predictive maintenance, and targeted marketing. May retain data for years after you sell the vehicle.
Dealerships
Access driving data for service recommendations. Know when you might be ready for a new car based on mileage patterns.
Insurance Companies
Increasingly receive driving behavior data directly. Can adjust premiums based on real driving patterns, not just demographics.
Law Enforcement
Can subpoena location and driving data. Some manufacturers comply with requests without requiring warrants.
Advertisers
Location data feeds targeted advertising. Know which stores you visit, how long you stay, and your commute patterns.
Data Brokers
Aggregate and resell vehicle data. Your driving information becomes part of larger consumer profiles.
The Insurance Connection
One of the most consequential data flows is to insurance companies. Programs marketed as "safe driver discounts" are often one-way data sharing agreements:
Insurance Data Programs
GM's OnStar Smart Driver program was found to be sharing detailed driving data with LexisNexis, which then sold reports to insurance companies—sometimes resulting in premium increases. Drivers often didn't realize enrollment was "opt-in" through dealership paperwork.
Real-World Consequences
This isn't theoretical. Data collection has already affected real people in tangible ways.
Documented Cases
Insurance Premium Increases
Multiple drivers reported 20-40% premium increases after their vehicles shared driving data with insurance companies through manufacturer programs they didn't know they'd enrolled in.
Divorce Court GPS Data
Vehicle location data has been subpoenaed in divorce proceedings to prove affairs or disputed whereabouts. Courts have generally allowed this data as evidence.
Criminal Investigations
Location data from connected cars has been used in murder investigations, sometimes providing crucial evidence—but also raising questions about warrantless access.
Employer Monitoring
Fleet management systems give employers detailed insight into employee driving behavior, raising workplace privacy concerns.
The Stalking Risk
Connected car apps create domestic abuse risks. In documented cases, abusers have used vehicle apps to:
- Track a partner's real-time location
- Remotely unlock or start the vehicle
- Access destination history
- Monitor arrival/departure alerts
Removing an ex-partner's access often requires dealer involvement and may not be immediate.
Privacy by Manufacturer
Not all manufacturers are equally invasive. Based on privacy policies and documented practices, here's how major brands compare:
| Manufacturer | Data Collection | Data Sharing | Opt-Out Options | Rating |
|---|---|---|---|---|
| Tesla | Extensive | Limited disclosure | Very limited | |
| General Motors | Extensive | Documented sharing with insurers | Limited | |
| Ford | High | Partners disclosed | Some options | |
| Toyota | Moderate | Service-focused | Some options | |
| Volkswagen Group | Moderate | GDPR compliant in Europe | Better in EU | |
| Mazda | Lower | Limited | Good |
Ratings based on privacy policy analysis, documented practices, and opt-out availability
Tesla: A Special Case
Tesla vehicles collect particularly extensive data, including:
- Multiple camera feeds from all angles
- Cabin camera footage
- Detailed driving telemetry
- Voice commands and audio
- Supercharger usage patterns
Tesla's privacy policy grants broad rights to use this data for "safety and security" purposes and to improve their vehicles. Opting out of data collection can disable features like Autopilot.
The Legal Landscape
Current laws provide limited protection against automotive data collection.
What's Legal Today
- Collecting your data: Legal with buried consent in purchase paperwork
- Sharing with partners: Legal if disclosed in privacy policy
- Selling to data brokers: Legal in most jurisdictions
- Providing to insurers: Legal, often without explicit notice
- Law enforcement access: Often provided without warrants via "business records"
Emerging Regulations
California (CCPA/CPRA)
Residents can request data deletion and opt out of sales. Manufacturers must disclose what data they collect.
European Union (GDPR)
Strongest protections. Requires explicit consent, data minimization, and right to erasure. Manufacturers must comply for EU customers.
Proposed: DRIVE Act (US)
Would require opt-in consent for data collection and sharing. Currently stalled in Congress.
Protecting Your Privacy
While complete privacy is nearly impossible with modern vehicles, you can take steps to minimize data exposure.
Before You Buy
- Research the manufacturer's privacy policy before purchasing
- Consider less-connected vehicles (fewer features = less data)
- Ask about data collection during the sales process
- Don't sign up for connected services you don't need
With Your Current Vehicle
Review Settings
Explore your vehicle's settings menu for privacy options. Many data-sharing features can be disabled, though some require navigating deep into menus.
Limit Phone Sync
When connecting your phone, only grant necessary permissions. Consider not syncing contacts or using Android Auto/CarPlay instead of built-in systems.
Disable Voice Assistants
Turn off always-listening features. Use voice commands only when necessary, or not at all.
Opt Out Where Possible
Contact customer service to request opt-out of data sharing programs. This may require persistent effort.
Before Selling
Perform a factory reset AND contact the manufacturer to delete cloud-stored data. Simply resetting the car may not erase server-side information.
Technical Measures
Proceed with Caution
Some enthusiasts disconnect cellular modems or use GPS blockers. These measures may void warranties, disable safety features (like automatic crash notification), and potentially violate regulations. They're not recommended for most users.
The Future of Car Data
The situation is likely to intensify before it improves. Here's what's coming:
Increasing Collection
- Vehicle-to-everything (V2X): Cars will communicate with infrastructure, other vehicles, and pedestrians—generating even more data
- Subscription features: Manufacturers increasingly monetize data and features post-sale
- Autonomous driving: Self-driving technology requires massive data collection
- In-car payments: Linking vehicles to payment systems creates financial data trails
Potential Improvements
- Regulatory pressure: Consumer advocates and lawmakers are increasingly focused on vehicle privacy
- Consumer awareness: As understanding grows, manufacturers may face market pressure to improve practices
- Privacy-focused alternatives: Some manufacturers may differentiate on privacy
The Bottom Line
Your car is no longer just a vehicle—it's a data collection device on wheels. The convenience of connected features comes with significant privacy trade-offs that most consumers don't fully understand. Until regulations catch up with technology, the burden falls on individual owners to educate themselves, make informed choices, and advocate for better protections.
The most effective action you can take today: read your vehicle's privacy policy, understand what you've agreed to, and make conscious decisions about which connected features are worth the privacy cost.