Major report says most car apps are leaking sensitive data to brokers

Consumer Reports has released a study on car privacy practices The report found huge privacy breaches across the board Big Tech firms are some of the largest recipients of your personal data Your car could be leaking personal information to Big Tech data brokers and invading your privacy without you

<![CDATA[ <article> <ul><li><strong>Consumer Reports has released a study on car privacy practices</strong></li><li><strong>The report found huge privacy breaches across the board</strong></li><li><strong>Big Tech firms are some of the largest recipients of your personal data</strong></li></ul><p>Your car could be leaking personal information to Big Tech data brokers and invading your privacy without your knowledge. That’s the conclusion of a <a href="https://www.consumerreports.org/electronics/personal-information/your-car-is-sharing-data-with-big-tech-companies-study-finds-a4474820962/" target="_blank">new study from Consumer Reports</a>, and it will be uncomfortable reading for anyone who’s concerned that their car may be sending personal info to data brokers.</p><p>The report was conducted by privacy researchers from Northeastern University in Boston and used Consumer Reports’ vehicles and Auto Test Center. The data, it argues, shows that “your car may be spying on you,” with the information it gleans from your driving behavior being sent to “some of the world’s biggest tech companies.” </p><p>It’s <a href="https://www.techradar.com/pro/many-of-the-most-popular-cars-on-the-roads-are-absolute-privacy-nightmares">no secret</a> that many recent cars <a href="https://www.techradar.com/vehicle-tech/hybrid-electric-vehicles/car-giants-are-reportedly-selling-your-driving-data-to-insurers-and-regulators-could-step-in">collect an enormous amount of data</a> about you — not just the way you drive, but the apps you use and <a href="https://www.techradar.com/vpn/vpn-privacy-security/information-collecting-monstrosities-are-chinese-connected-cars-really-worse-for-your-privacy">even your voice</a>. This is sometimes used to market products to you and could potentially result in you being charged higher insurance premiums. Several carmakers have been fined for carrying out these practices without clearly informing users. </p><p>Now, Consumer Reports says that, of the vehicles it tested, “Nearly every automaker sent data to outside companies.” </p><p>Moreover, “almost a quarter of the vehicles’ apps were found to be sending out personally identifiable information, including vehicle owners’ names, vehicle identification numbers (VINs), and precise geographic locations.” That data could be sold to data brokers and linked to other information held about you, which means that anyone who purchases that information would know a huge amount about you without having met you. </p><p>It also puts you at greater risk should that data be leaked or hacked. A massive aggregation of personally identifiable information could be used for stalking, identity theft, medical fraud or other damaging forms of criminal and nefarious behavior. </p><p>As Sarah Elizabeth Gillespie, one of the study’s co-authors, opined: “It does not appear that a customer can buy a new car that does not track you.”</p><h2 id="where-is-the-data-going">Where is the data going?</h2><figure class="van-image-figure inline-layout" data-bordeaux-image-check ><div class='image-full-width-wrapper'><div class='image-widthsetter' style="max-width:1151px;"><p class="vanilla-image-block" style="padding-top:53.87%;"><img id="H5yaH8Yt7ofvp34PjjRm5g" name="tesla-cybertruck.jpeg" alt="Tesla Cybertruck" src="https://cdn.mos.cms.futurecdn.net/H5yaH8Yt7ofvp34PjjRm5g-1920-80.jpeg" mos="" align="middle" fullscreen="" width="1151" height="620" attribution="" endorsement="" class="inline"></p></div></div><figcaption itemprop="caption description" class=" inline-layout"><span class="credit" itemprop="copyrightHolder">(Image credit: Tesla)</span></figcaption></figure><p>The worst privacy breach involved those firms that sent both the VIN and another data point, such as your email address or full name, to a data broker. That allows an advertising firm to link you to “to one of many commercially available consumer profiles, which are sold by data brokers and other companies. The data often includes online behavior and shopping history,” Consumer Reports concluded. </p><p>Interestingly, Consumer Reports said that “The top recipients of the driver data were some of the country’s largest tech companies, including Amazon, Google, Meta, Microsoft, Pinterest, Snap, and Yahoo.” </p><p>Why is this data primarily flowing to <a href="https://www.techradar.com/pro/is-big-techs-grip-on-global-influence-already-unbreakable">Big Tech firms</a>? The answer, Consumer Reports said, was twofold: they are often providers of connected apps in the car’s infotainment system, and also function as operators of advertising auction platforms used by third-party marketers. </p><p>While some automakers said that their data-sharing terms could be opted out of, that could severely restrict the way you use it. In the case of <a href="https://www.techradar.com/vehicle-tech/hybrid-electric-vehicles/the-tesla-roadsters-october-reveal-looks-like-another-piece-of-pantomime-its-a-shame-the-once-ground-breaking-company-doesnt-focus-on-cars-anymore">Tesla</a>, the company’s data-sharing agreement says that opting out “may result in your vehicle suffering from reduced functionality, serious damage, or inoperability.” </p><p>Indeed, Tesla was one of the worst offenders, with the researchers noting that the Tesla Model 3 connected to 34 advertising, tracking or analytics domains. The second-worst offender in this category was another Tesla vehicle, the Cybertruck, with 23 connections. </p><p>“Of the vehicles tested, 28 of 30 connected mobile apps sent data to at least one outside advertising and/or analytics company, and seven sent at least one piece of personally identifiable information — the vehicle owner’s name, the car’s VIN, or its precise geographic location — to at least one outside company,” Consumer Reports warned. </p><p>The study added that “The findings underscore the immense personal data ecosystem that American consumers are unwittingly drawn into when they purchase and use everyday consumer products, including autos.”</p> </article> ]]>